239 matches found
Application-Security-Curriculum
Application-Security-Curriculum Grant Ongers - Scalare l'AppSec attraverso l'istruzione - DEF CON 29 AppSec Village...
patoolkit
.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...
You-re-Doing-IoT-RNG
Stai sbagliando l'RNG nell'IoT Questa repository contiene i nostri risultati e anche il codice dei dispositivi usato per generare i numeri casuali su diversi dispositivi. Per una spiegazione più completa delle vulnerabilità e dei problemi, guarda il nostro talk al DEF CON 21 qui:...
DC30-Badge-Challenge-Writeup
DC30-Badge-Challenge-Writeup Indice Introduzione Sfida Parte 1: Raccogliere le Note Sfida Parte 2: Chiamare YИИEႱ Sfida Parte 2A: Alice Sfida Parte 2B: Bob Sfida Parte 2C: Carol Sfida Parte 2D: Dan Sfida Parte 2E: Eve Sfida Parte 2F: Trevor Sfida Parte 3: Il Filo Finale E se mi sono perso i...
dcsgonebadge
DEF CON Singapore One Badge Questo progetto gestisce il design hardware del primo progetto di Circuit Crafters, un badge elettronico destinato alla distribuzione al DEF CON Singapore 2026 security conference presso il Marina Bay Sands Expo and Convention Centre. Licenza Questo progetto è concesso...
LiveCTF-DEFCON30
LiveCTF 2022 Repository zur Ablage von Challenges, Infrastruktur-Notizen, Streaming-Konfiguration und anderen versionierten Informationen für das LiveCTF-Finale der DEF CON CTF. Im LiveCTF verwendete Challenges | Challenge-Name| Teilnehmer| Sieger ---|---|---|--- Achtelfinale: 1| syscall-me-maybe...
mose
MOSE Master Of SErvers...
DC30_Workshop
DEF CON 30 Workshop Mainframe-Container Die Skripte hier werden verwendet, um den virtuellen MVS-3.8j-Großrechner für den DEFCON-30-Workshop zu erstellen. Vielen Dank, dass Sie sich den DEFCON-30-Workshop zu Mainframe-Buffer-Overflows ansehen. Docker verwenden Dieser Docker-Container enthält alle...
PT-2026-79680
In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd keycode with tty port tty get kbd keycode reads vc-port.tty without acquiring a tty reference, racing against con shutdown which clears port.tty under a different lock. Use tty port tty get/tty...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: A memory leak was fixed in amdgpurasinit. When amdgpunbiorasswinit fails in amdgpurasinit, the function returns directly without freeing the allocated con structure, resulting in a memory leak. This issue was fixed by...
kernel: vt: prevent kernel-infoleak in con_font_get()
In the Linux kernel, the following vulnerability has been resolved: vt: prevent kernel-infoleak in confontget font.data may not initialize all memory spaces depending on the implementation of vc-vcsw-confontget. This may cause info-leak, so to prevent this, it is safest to modify it to initialize...
CVE-2026-45976
Summary: CVE-2026-45976 affects the Linux kernel’s drm/amdgpu driver, where amdgpu_nbio_ras_sw_init() failing inside amdgpu_ras_init() could leak memory because the allocated con structure wasn’t freed. The fix makes the function jump to release_con to properly clean up before returning the error...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mojarra (UTSA-2026-016756)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016756 advisory. Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. Tenable has extracted the...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ARM: ep93xx: Added a terminator to gpiodlookuptable Without the terminator, if a conid is passed to gpiofind, and the conid does not exist in the lookup table, the function will not stop looping correctly, potentially leading to ...
Astra Linux – Vulnerability in Linux, Linux 5.10
A data race flaw was discovered in the Linux kernel, between the allocation of the con variable and the setting of con-sock. This issue results in a NULL pointer dereferencing when accessing con-sock-sk in the net/tipc/topsrv.c file within the tipc protocol in the Linux kernel...
Joy-Con Droid 安全漏洞
Joy-Con Droid is an open-source application developed by TeamJCD that transforms Android devices into game controllers. Versions of Joy-Con Droid prior to 1.0.93 contained security vulnerabilities, which were caused by path traversal attacks. These vulnerabilities could lead to issues with the...
PT-2026-2107
Name of the Vulnerable Software and Affected Versions Werkzeug versions prior to 3.1.5 Description Werkzeug’s safe join function improperly handles path segments containing Windows device names with file extensions or trailing spaces. Windows device names, such as CON and AUX, are implicitly...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000410)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000410 advisory. A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop. Tenable has...
Improper Handling of Windows Device Names
Overview Affected versions of this package are vulnerable to Improper Handling of Windows Device Names via the safejoin function. An attacker can cause the application to hang indefinitely by requesting a path ending with a Windows special device name, e.g. CON or NUL. Note: This is only vulnerab...
