legion

Legion ZK Auth 🛡️ 真正的零知识认证，带有硬件绑定的设备环签名 🎯 Legion 是什么？ Legion 是一个 免密码的零知识认证系统 ，可以在不暴露你是谁 的情况下证明你拥有授权。 只需使用你的 指纹 + 24 词恢复助记词 （类似 MetaMask）即可完成认证。无需用户名、无需密码、无需服务器端秘密。 主要特性 ✅ 免密码认证 ：BIP-39 恢复助记词 + 指纹（无用户名/密码） ✅ 真正的零知识 ：服务器永远不会知道你的身份（100 万用户中的 1 个） ✅ 设备匿名 ：通过环签名绑定硬件（1000 台设备中的 1 台） ✅ 无需可信设置 ：Halo2...

CVE-2026-63576

Improper certificate validation in PkixNameConstraintValidator ExtractHostFromURL in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordinate CA, or anyone able to obtain certificates with chosen subjectAltName URIs from such a CA, to bypass permitted or...

CVE-2026-103603

Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...

CVE-2026-103604 Quadratic-time escaping when converting X.509 distinguished names to strings

Inefficient algorithmic complexity in X.509 distinguished name string conversion X509Name.ToString and IetfUtilities.ValueToString in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker to cause a denial of service through CPU exhaustion via a...

EUVD-2026-91233

Memory allocation with excessive size value in the HSS/LMS signature code HssPublicKeyParameters, HssSignature in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker who can supply both an HSS public key and a signature to cause a denial of service...

EUVD-2026-91232

Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who controls, or can obtain certificates from, a name-constrained intermediate CA to have certificates accepted during PKIX certification path validation fo...

CVE-2026-63574

The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. contains a memory allocation vulnerability in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket , UserAttributeSubpacketsParser.ReadPacket ). A remote, unauthenticated...

legion

NOTICE Legionリポジトリは https://github.com/hackman238/legion に移行しています。今後のリリースやアップデートなどはすべてそこから行われます。大きな改善が予定されています！この組織の下にあるこのリポジトリは今後メンテナンスされません。 ✨ 概要 Legionは、SECFORCEのSpartaのフォークであり、オープンソースで使いやすく、非常に拡張性が高く、半自動化されたネットワークペネトレーションテストフレームワークです。情報システムの発見、偵察、および悪用を支援します。 KaliにおけるNMAP 7.92のSegfault修正...

PT-2026-104133

Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers SignatureSubpacketsParser.ReadPacket, UserAttributeSubpacketsParser.ReadPacket in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote, unauthenticated attacker who can...

lenovo_y700_tb320fc_on_CVE-2025-21479

TB320FC 内核提权 — CVE-2025-21479 English | 简体中文 联想拯救者 Y700 2023（TB320FC ）的内存态内核提权 方案，利用 CVE-2025-21479 （Qualcomm Adreno GPU SMMU 漏洞），并通过 ReSukiSU 提供完整的 root 管理能力。 不需要解锁 Bootloader、不需要刷机、激活阶段不需要电脑 。 ⚠️ 仅限对你自己拥有 或明确获得授权 的设备进行安全研究。详见免责声明。 目标设备 本项目的所有偏移与行为均针对以下设备调校。未经重新适配，不要预期在其他机型/固件上可用 （详见...

WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Staff Training versions = 1.0.7...

WordPress Ditty plugin <= 3.1.66 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Ditty versions = 3.1.66...

WordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin MarketKing versions = 2.1.40...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CVE-2026-9046

CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

EUVD-2026-44975

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CVE-2026-9046: Insecure Inherited Permissions

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...