vault

Vault 注意 : 当社はVaultのセキュリティとユーザーの信頼を非常に重視しています。Vaultでセキュリティ上の問題を発見されたと思われる場合は、[email protected]までご連絡いただき、責任ある開示をお願いいたします。 ウェブサイト: developer.hashicorp.com/vault お知らせメーリングリスト: Google Groups ディスカッションフォーラム: Discuss ドキュメント: https://developer.hashicorp.com/vault/docs チュートリアル:...

processhacker-mcp

processhacker mcp これは、ランタイム解析とプロセスハッキングのための動的MCPサーバーです。processhackerのようなものですが、AIエージェント向けです。 セットアップ 1. Visual Studioでフォルダを開きます（CMakeLists.txtがあります） 2. すべてをビルドします（Ctrl+Shift+B） 3. ProcessHackerMCP.exeとextensions/フォルダが作成されます。 4. exeを実行します。stdin/stdoutで通信します。 エディタ連携...

LID

██╗ ██╗██████╗ ██║ ██║██╔══██╗ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ███████╗██║██████╔╝ ╚══════╝╚═╝╚═════╝ Linux 完整性漂移 — "Linux 正在消亡" — 系统发现绕过 LSM 安全保证的内核代码路径 大门从未被攻破，只是被绕过了。 什么是 LID？ Linux 安全模块框架有一个核心保证，已经保持了 20 多年 ： 安全模块只能增加 限制。它们永远不能移除 限制。 这个保证是正确的。LID 并没有打破它。 LID 发现了完全绕过 LSM 钩子的内核代码路径 ——执行安全敏感操作而不咨询...

pgaudit

pgAudit オープンソース PostgreSQL 監査ログ記録 はじめに PostgreSQL Audit Extension pgAudit は、標準の PostgreSQL ログ機能を介して、詳細なセッションおよびオブジェクトの監査ログを提供します。 pgAudit の目標は、政府、金融、ISO 認証などの要件を満たすために必要な監査ログを生成する機能を PostgreSQL ユーザーに提供することです。 監査とは、通常、独立した機関による個人または組織のアカウントの公式な検査です。pgAudit...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

AlmaLinux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1787212689)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787212689 advisory. - In MariaDB server version through 11.8.5, when server audit plugin is enabled with serverauditevents variable configured with QUERYDCL,...

Rocky Linux 9.6 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc (ALMALINUX9.6:CLSA-2026:1787212689)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787212689 advisory. - In MariaDB server version through 11.8.5, when server audit plugin is enabled with serverauditevents variable configured with QUERYDCL,...

CVE-2026-59827

授权的 Metabase CVE-2026-59827 渗透测试工具 一款用于在经批准的渗透测试项目中验证 Metabase 部署中是否存在 CVE-2026-59827 的授权安全评估工具。 该工具旨在通过执行受控的概念验证演示来证明漏洞的存在，同时尽量减少影响，而非尝试破坏性或持久性操作。执行的每个操作都会被记录，以提供适合专业安全评估的审计跟踪。 警告 本项目仅 适用于您拥有或已获得明确书面许可进行测试的系统。未经授权使用可能违反适用法律和组织政策。 功能特性 测试前授权验证 交互式确认或授权令牌支持 多种安全的漏洞演示 自动审计日志 基于 JSON 的渗透测试日志...

UBUNTU-CVE-2026-84439

When audit logging is enabled zookeeper.audit.enable=true, an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentication request with tab characters \t embedded in the username. Because the audit log uses tab-separated key=value forma...

Improper Output Neutralization for Logs

Overview org.apache.zookeeper:zookeeper is a centralized service for maintaining configuration information, naming, providing distributed synchronization, and providing group services. Affected versions of this package are vulnerable to Improper Output Neutralization for Logs in the audit logging...

CVE-2026-90955

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

Astra Linux – Vulnerability in Samba

A flaw was discovered in the Samba AD LDAP server. The AD DC database audit logging module can access values of LDAP messages freed by a preceding database module, leading to a use-after-free issue. This issue only occurs when certain privileged attributes are modified, such as userAccountControl...

CVE-2026-90955 MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

EUVD-2026-77442

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

CVE-2026-90955 MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

CVE-2026-90955 MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

PT-2026-91183

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLogable behavior stored that identity in behavior-instance state...

vault v2.1.0

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

EUVD-2026-69721

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

CVE-2026-84479

WWBN AVideo (version e01e41ecc and earlier) contains an authentication bypass vulnerability where three login-time security controls rely solely on the client-supplied User-Agent header. The isAVideoEncoder() and isAVideoMobileApp() checks match HTTP_USER_AGENT against hardcoded literals ("AVideo...