CVE-2026-95837 containerd CRI plugin: Checkpoint restore bypasses destination security context

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...

CVE-2026-95837 containerd CRI plugin: Checkpoint restore bypasses destination security context

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...

CVE-2026-95837 containerd CRI plugin: Checkpoint restore bypasses destination security context

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...

CVE-2026-95837

The containerd container runtime (versions 2.1.0 through 2.2.6 and 2.3.0 through 2.3.3 ) is vulnerable to a security context bypass during the CRI CreateContainer checkpoint restore process. The root cause is that the CRIU tool restores the process security state from the checkpoint data instead ...

CVE-2026-77366

The obsidian-tc Model Context Protocol server is vulnerable to an authorization bypass in versions prior to 1.3.1 . The flaw occurs because tool dispatch fails to verify that the caller-controlled input.vault value matches the vault bound to the caller, compounded by a lack of vault claims in the...

fish-live-in-trees

Fish Live in Trees Production LLM Runtime Alignment Context Injection RACI Author: Sean Kavanagh Date: 2026-02-16 Environment: Gemini 3 Flash Free Tier - Public Production Interface Exploit Type: Contextual Pivot Factual Accuracy → Interpersonal Authenticity No jailbreak payloads. No special tool...

CVE-2026-85953

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution...

CVE-2020-11179-Adreno-Qualcomm-GPU

My independent work from the poc created by P0 researcher Ben Hawkes Original article: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html My goal is to convert his poc to C, and continue where he left off and turn the poc into either a root shell, or a kernel r/w, a...

context-segmentation

Context Segmentation for SLM Agents This is the implementation of the solution proposed in the scientific paper: Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks Setup Ensure you have Python 3.12.3+ installed along with Docker engine Python environment python...

skill-safety-bench

SkillSafetyBench SkillSafetyBench is a fully materialized benchmark for evaluating safety failures caused by attacks on skill-facing context. Each case keeps the user-facing task ordinary, while the attack is placed in local skills, helper scripts, sidecar files, corpora, templates, or other...

CVE-2022-29598

CVE-2022-29598 : Reflected Cross-Site Scripting XSS in RSS v500 Mitre URL: https://vulners.com/cve/CVE-2022-29598 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 The RRS v500 application by Solutions Atlantic is vulnerable to a reflected Cross-Site Scripting XSS vulnerability...

LLM-MCP-Security-Field-Guide

🛡️ AI Security Field Guide — LLM + MCP Security The most comprehensive, up-to-date, practitioner-first security reference for LLM applications and Model Context Protocol MCP deployments. Covers real CVEs, live attack patterns, OWASP frameworks, red teaming tools, and actionable checklists — update...

ROOT-APP-MAVEN-CVE-2022-22968 CVE-2022-22968 in org.springframework:spring-context - Patched by Root

Root has patched CVE-2022-22968 in the org.springframework:spring-context package for Root:Maven. Multiple fixed versions available...

batch_jailbreak

Official Repo for Safety in Batches? Understanding and Mitigating Safety Failures in Batch Prompting Kihyun Kim, Hee-Seon Kim, Wonjun Lee, Changick Kim Korea Advanced Institute of Science and Technology KAIST News 2026.09 Our paper has been accepted to AACL-IJCNLP 2026 Main! 🎉 2026.08 Paper is...

dora

dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...

PT-2026-110976

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.1 Description The MCP configuration interface allows a secondary authenticated user to bypass restrictions present in the regular HTTP configuration API. While the HTTP API rejects restricted Nginx directives, th...

PT-2026-110974

Name of the Vulnerable Software and Affected Versions Nginx UI versions prior to 2.4.1 Description An authenticated user can bypass configuration validation because the config.ValidateConfigDirectives function only checks the first directive token on each line, ignoring subsequent...

FortiLPE

Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...

toolkit

English | English Indetectables Toolkit Diseñado como una navaja suiza, este conjunto de herramientas es invaluable para analistas de malware, crackers y expertos en ciberseguridad. Está meticulosamente elaborado para apoyar tanto a usuarios novatos como experimentados. Es el complemento perfecto...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Attack Description It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a...