seal-security-nuget-demo-net7

ブラウザ + CLI デモ NuGet/C — .NET 7 エディション なぜ .NET 7 フォークなのか? これは、標準的な seal-security-nuget-demo（net9.0 をターゲットにしている）を再ターゲットしたフォークです。エクスプロイトのストーリー、コントローラー、シールドパッケージのリストは同一です — TargetFramework のみが異なります。 これが存在する理由は、ほとんどのエンタープライズ顧客が要求に応じて最新の .NET SDK に移行できないためです。.NET 7 は 2024 年 5 月 14 日にサポート終了に達しました...

ysonet

YSoNet is a fork of the original YSoSerial.Net, currently maintained by @irsdl. Sites: ysonet.net or ysonet.com both open this repo. A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. What is YSoNet YSoNet previously known as ysoserial.net is a...

-cve-2021-45232

近日、https://Hellofhackers.com で完全な記事を公開予定です...

RLSA-2026:70640 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

buildah security update

An update is available for buildah. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The buildah package provides a tool for facilitating building OCI container...

RLSA-2026:70459 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry CVE-2026-45894 kernel: crypto: ccp - Fix a...

RLSA-2026:70641 Important: skopeo security update

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fixes: skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion in Unmarsha...

skopeo security update

An update is available for skopeo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Command line utility to inspect images and repositories directly on Docker...

CVE-2026-26221-Hyland-OnBase-Timer-Service-Unauthenticated-RCE

📡 Hyland OnBase Timer Service 認証なしRCE Mohammed Idrees Banyamer セキュリティ研究者 ヨルダン 🇯🇴 🧨 概要 このリポジトリには、安全でない .NET Remoting BinaryFormatter デシリアライゼーション を介した Hyland OnBase Timer Service の認証なしリモートコード実行の脆弱性に対する Proof‑of‑Concept エクスプロイトが含まれています。 この脆弱性により、認証されていない攻撃者が細工した BinaryFormatter ペイロードを Timer Service...

AZL-103895 CVE-2026-97491 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rdsibconnpathshutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other wo...

CVE-2026-97440

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix node refcount leak on ctrl packet alloc failure qrtrsendresumetx calls qrtrnodelookup which takes a reference on the returned node. If the subsequent call to qrtrallocctrlpacket fails due to memory allocation...

CVE-2026-97435

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

DEBIAN-CVE-2026-97411

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.69 security and extras update

Red Hat OpenShift Container Platform release 4.15.69 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a security impact of...

MGASA-2026-0448 Updated perl-Net-DNS packages fix security vulnerabilities

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. CVE-2026-64193 Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. CVE-2026-64194 Net::DNS versions before 1.57 for Perl allow memory exhaustion v...

Updated perl-Net-DNS packages fix security vulnerabilities

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. CVE-2026-64193 Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. CVE-2026-64194 Net::DNS versions before 1.57 for Perl allow memory exhaustion v...

CVE-2026-97491

The Linux kernel contains a vulnerability in the net/rds component where the rds_ib_conn_path_shutdown function improperly sleeps. Specifically, a shutdown worker thread uses a wait_event call that blocks other work items in the queue, leading to a system hang during the teardown of IB network co...

EUVD-2026-86089

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rdsibconnpathshutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other wo...

CVE-2026-97491 net/rds: Don't sleep inside rds_ib_conn_path_shutdown

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rdsibconnpathshutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other wo...

EUVD-2026-86048

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...