N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by September 11, 2026. The...

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...

CVE-2021-30632

来源：https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 此漏洞的分析可在此处查看。这是一个由匿名研究人员报告的 Chrome 漏洞，据信已在野外被利用。 此处提供的漏洞利用已在 v8 版本 9.3.345.16（commit 632e6e7）上测试通过，该版本随 Chrome 93.0.4577.63 一同发布，是漏洞修复前的最后一个版本，测试环境为 Ubuntu 20.04。我尚未在 Chrome 本身上进行测试。 要进行测试，请检出 v8 的 commit...

Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats...

CVE-2023-3079

CVE-2023-3079 漏洞利用 感谢 @clem1 发现 ITW 漏洞。 感谢 @alisaesage 先前对该漏洞的 RCA 分析。 感谢 @buptsb 对该漏洞的 笔记。 资源 Writeup 和其他资源。 https://issues.chromium.org/issues/40065138 https://web.archive.org/web/20240304191209/https://cwresearchlab.co.kr/entry/CVE-2023-3079-Bug-in-the-handling-of-the-arguments-object...

CVE-2022-4262

Exploit for CVE-2022-4262 官方 Chromium 漏洞报告。 致谢 @clem1 发现 ITW 漏洞利用。 致谢 @5aelo 对漏洞的 RCA。 致谢 @bjrjk 对漏洞的 超深入 RCA。 致谢 @alisaesage 关于漏洞的 视频。...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect 身份验证绕过漏洞 ⚡ 简单用法 仅在安全且授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone https://github.com/HORKimhab/CVE-2026-0257 cd CVE-2026-0257 Create virtual environment python -m venv venv Active virtual environment Linux / macOS: source...

CVE-2025-24990

CVE-2025-24990 — Windows 不受信任指针解引用（权限提升） 研究文章由 Sentinel AI Defense 撰写。仅供防御分析 — 此处不发布任何可用漏洞利用 或 PoC。 Windows 中一个高权限组件在未经验证的情况下解引用来自不受信任上下文的指针，从而让低权限攻击者能够获得任意内存访问权限，并开辟一条通往 SYSTEM 的可靠路径。该漏洞于 2025 年在野外被积极利用。 📄 完整文章：https://sentinelaidefense.com/posts/cve-2025-24990-windows-untrusted-pointer.html 概述...

lab_xz_backdoor

XZ 后门演练 CVE-2024-3094 安全、动手操作的实验室，用于理解 xz-utils 供应链后门 — 专为防御者、学生和蓝队成员而建。 !WARNING 本项目处理真实的、在野的恶意软件 （xz 5.6.0 / 5.6.1 后门）。其提供严格用于防御性教育和授权研究 。所有操作均在可丢弃的隔离虚拟机中运行，无互联网路由。不要 在您关心的机器上、在您无法控制的网络上或针对任何未经授权测试的系统运行这些工件。请参阅 SECURITY.md。 内容简介...

CVE-2019-1367

0x00背景介绍 Internet Explorer，是微软公司推出的一款网页浏览器。用户量极大。 9月23日微软紧急发布安全更新，修复了一个影响IE浏览器的远程代码执行漏洞。由谷歌威胁分析小组发现此漏洞，据称该漏洞已遭在野利用。 0x01漏洞描述 此漏洞是由InternetExplorer脚本引擎中处理内存对象的方式中的内存损坏引起的。要利用此漏洞，攻击者必须引导用户打开已经托管漏洞的恶意网站。 利用此漏洞可以导致攻击者获得用户的当前权限，并执行任意代码。如果当前用户拥有管理权限攻击者可以在系统上执行各种操作，从创建具有完全权限的新帐户到安装程序甚至修改数据。 0x02漏洞编号...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server y Confluence Data Center incluyen una importante vulnerabilidad de ejecución remota de código no autenticada identificada como CVE-2022-26134, según un aviso de seguridad publicado por Atlassian el 2 de junio de 2022. La vulnerabilidad no estaba parcheada cuan...

CVE-2025-66478

CVE-2025-66478 - Next.js Server Actions RCE 漏洞實際攻擊日誌分析 概述 本專案收集了一個暴露在網際網路上的 Next.js 15.1.2 應用程式（執行於 Docker 容器中）所記錄的真實攻擊日誌。這些日誌展示了 CVE-2025-66478 漏洞在野外被大量自動化攻擊工具掃描和利用的情況。 紀錄時間範圍 : 2025-12-04 2025-12-06（約 48 小時） 環境資訊 : 框架: Next.js 15.1.2 執行環境: Bun v1.2.20 容器: Docker Alpine Linux 時區: Asia/Taipei...

CVE-2025-14174-analysis

Análisis de CVE-2025-14174: Escritura fuera de límites en el búfer de staging de ANGLE Metal Análisis técnico y prueba de concepto para CVE-2025-14174...

ConPresentations

ConPresentations 我在一些会议上的演讲幻灯片、资源和录音合集。 会议演讲 BSidesCanberra 2023 主题演讲："When Exploits Aren't Binary" 幻灯片 OffensiveCon 2023："The Print Spooler Bug That Wasn't"，与 James Forshaw 合作 幻灯片 视频 Zer0Con 2023："A Year in Review of 0-days Exploited In-the-Wild in 2022" 幻灯片 博客 EKOPARTY 2022："A Very Powerful...

GHSA-7G4W-CG88-2CQ2

creationtimestamp| type| source ---|---|--- 2026-08-28 20:59:24+00:00| seen| https://bsky.app/profile/newssecia.bsky.social/post/3mu6ax42wfx2g 2026-08-28 22:00:41+00:00| seen| https://thehackernews.com/2026/08/cosmos-evm-flaw-exploited-after-cosmos.html 2026-08-29 01:00:36+00:00| seen|...

August Linux Patch Wednesday

August Linux Patch Wednesday. A total of 3,060 vulnerabilities. For comparison, there were 2,017 in July. That's a 52% increase and another new record. This time, there are 1,354 vulnerabilities in the Linux Kernel and 447 in Chromium. For 3 vulnerabilities, there are signs of exploitation in the...

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker was able to execute code in the content process by exploiting a use-after-free in Animation timelines. There have been reports of this vulnerability being exploited in real-world scenarios. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1,...

EUVD-2026-63948

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution

Update: The story was updated after publication to note that the vulnerability has not been exploited. Although the security bulletin originally marked the "Exploited" field under the Exploitability Assessment table as "Yes," on August 21, 2026, Microsoft corrected the "Exploited" status to "No"...