TencentOS Server 4: iscsi-initiator-utils (TSSA-2026:1057)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1057 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

No One Architecture Fits All: A Cross-Environment Evaluation of Hierarchical Red Team Agents

Autonomous red team agents increasingly stress-test AI-enabled cyber defenses by planning strategy and executing multistage attacks. Reinforcement learning RL and large language models LLMs offer complementary mechanisms for the planning and execution such agents require, and prior work has...

TencentOS Server 4: grafana (TSSA-2026:1054)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1054 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: libevent (TSSA-2026:1051)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1051 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: python-tornado (TSSA-2026:1056)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1056 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: pcre2 (TSSA-2026:1052)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1052 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: tomcat (TSSA-2026:1064)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1064 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 4: php (TSSA-2026:1061)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1061 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: expat (TSSA-2026:1058)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1058 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

pgadmin4-9.10-CVE-2025-13780

pgadmin4 9.11 元命令过滤器命令执行 摘要 pgAdmin 在修复 Issue 9320 时引入的 PLAIN 恢复元命令过滤器，在 SQL 文件以 UTF-8 字节顺序标记 EF BB BF 或其他特殊序列开头时无法检测到元命令。该实现的过滤器使用函数 hasmetacommands，该函数通过正则表达式扫描原始字节。该正则表达式未将这些字节视为可忽略，因此诸如 ! 的元命令仍未被检测到。当 pgAdmin 使用 --file 调用 psql 时，psql 会去除这些字节并执行命令。这可能导致在恢复操作过程中执行远程命令。 此绕过影响在提交...

picohaxx

souce coming soon™ picohaxx Pico 4 デバイス向けのオープンソースカーネルエクスプロイト（cve-2023-33107 に基づく） Usage: picohaxx options -- GENERAL OPTIONS: -help Show this help menu -v Print build timestamp and exit -unroot unroot adbd -nobash once adb root is unlocked, the default is to pivot to a more capable embedded bash...

RHCOS 4 : OpenShift Container Platform 4.22.16 (RHSA-2026:71445)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71445 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - net/http: golang...

Presentations

演示文稿 演示文稿| 幻灯片| 视频 ---|---|--- BlueHat IL 2020 - Trinity: PSP 模拟器逃逸| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: 蓝光光盘 Java 沙箱逃逸| 2022-hardwear-io-bd-jb.pdf| https://www.youtube.com/watch?v=jyyCOoWksbg HEXACON2022 - bd-jb: 蓝光光盘沙箱逃逸| |...

CVE-2020-12753-PoC

CVE-2020-12753-PoC このリポジトリには、LG Stylo 4 AMZ/Q710ULM 上で Secure EL3 の任意コード実行を可能にする SBL1/aboot の脆弱性 🔋📱❄️🥾🔓 の概念実証 PoC が含まれています。これは、アップデート 20a と 20c、およびこの脆弱性の SBL1 バリアントでのみテストされています。 - Makefile : sblrop.s と rawresources.img884736 から rawresourcesamod.img をビルドします - rawresources.img884736 : 元の rawresource...

lean-cve-poc

CVE-2026-72844：Lean 4 内核健全性漏洞 通过嵌套归纳类型投影验证绕过，在无公理条件下证明0 = 1。 字段| 值 ---|--- CVE| CVE-2026-72844 安全公告| VulnCheck VCSA 缺陷报告| leanprover/lean414576 修复| leanprover/lean414577 影响版本| Lean 4 ≤ v4.31.0 / nightly ≤ 2026-07-27 修复版本| nightly 2026-07-29+ / v4.32.2 CVSS 4.0|...

CLSA-2026-1790609840 TuxCare security update for nanoid (4 CVEs)

TuxCare rebuilt nanoid to address 4 CVEs. Fixed in 3.3.7-tuxcare.2...

CVE-2024-37888

CVE-2024-37888 このリポジトリは、自身が発見し報告したCVE-2024-37888の脆弱性の詳細とエクスプロイトを文書化しています。 Metrics CWE-79: ウェブページ生成時の入力の中和の不備（クロスサイトスクリプティング） CVSS: 6.1 中 脆弱性の概要 この Proof of Concept POC は、私が最近発見したOpen LinkプラグインのXSS脆弱性の悪用を示しています。このプラグインが有効になると、CKEditor...

grafana-CVE-2018-15727

Grafana CVE-2018-15727 エクスプロイト インストール $ go get github.com/u238/grafana-CVE-2018-15727 使い方 $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for Grafana 5.x: grafanauser : ldapadmin...

CVE-2026-63223-POC

CVE-2026-63223 PoC — CodeIgniter 4 文件上传 RCE CVSS 9.8（严重） | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE-434 ：危险类型文件的不受限制上传 修复版本 ：CodeIgniter 4 v4.7.4 安全公告 ：GHSA-mmj4-63m4-r6h5 漏洞摘要 CodeIgniter 4 的 isimage 和 mimein 文件上传验证规则仅检查基于内容派生的 MIME 类型 （魔数），而不检查 客户端提供的文件扩展名。 未认证的攻击者可以在 PHP webshell...

CVE-2002-0347

CVE-2002-0347 Cobalt RAQ 4 にはディレクトリトラバーサルの脆弱性があり、リモートの攻撃者が HTTP リクエスト内の ..（ドットドット）を使用して、パスワードで保護されたファイルや、Web ルート外のファイルを読み取ることが可能です。 Packetstorm 公開記事: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 公開記事: https://www.securityfocus.com/bid/4208 作者 Alex Hernandez 別名...