bloom

Bloom : Évaluations Comportementales Automatisées pour les LLMs !IMPORTANT Bloom a une nouvelle maison. Il est désormais développé et maintenu par Meridian Labs et se trouve sur meridianlabs-ai.github.io/petribloom — toutes les nouvelles fonctionnalités et correctifs seront publiés là-bas. Ce dép...

eternal

Introduction Ceci est le dépôt racine de l'Initiative du Logiciel Éternel. L'ESI définit une architecture machine minimale basée sur une modification du Subleq OISC si simple que sa spécification complète peut être écrite sur une serviette. Nous fournissons ensuite un backend de compilateur LLVM...

private-membership

Appartenance à un Ensemble Privé PSM Énoncé du problème L'appartenance à un ensemble privé PSM est un protocole cryptographique qui permet aux clients d'interroger de manière privée si l'identifiant du client est membre d'un ensemble d'identifiants détenus par un serveur de manière à préserver la...

duplicut

Duplicut :scissors: Dédupliquez rapidement des listes de mots massives, sans en changer l'ordre Créé par nil0x42 et contributeurs 📖 Aperçu De nos jours, la création de listes de mots de passe implique généralement la concaténation de multiples sources de données. Idéalement, les mots de passe les...

koppeling-p

koppeling-p Адаптивный перехват DLL / динамическое перенаправление экспорта — сохранение EAT Обзор Этот проект представляет собой ограниченное расширение только на Python для замечательного проекта Ника Лэндерса @monoxgas, доступного здесь. Отличия Единственное отличие от оригинального проекта...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

tracehound

Tampon de sécurité d'exécution déterministe pour les API à haute vélocité Les systèmes externes signalent les menaces. Tracehound préserve les preuves. Site Web · Index de la documentation · Référence API · Configuration · RFCs · Sécurité · Journal des modifications Tracehound est un runtime...

SUSE SLES15 Security Update : fuse-overlayfs (SUSE-SU-2026:4026-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4026-1 advisory. This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservatio...

CVE-2026-93658: Improper Preservation of Permissions

uutils coreutils versions before 0.10.0 apply setuid or setgid mode to install destinations before finalizing ownership changes, allowing privileged users to leave setuid executables owned by the privileged invoker when ownership changes fail. Attackers can execute leftover setuid files with...

CVE-2026-61709: Improper Preservation of Permissions

OpenFGA is an authorization and permission engine built for developers. Prior to 1.18.1, the ListUsers API could return a user that should have been excluded when an authorization relation used an intersection containing a base but not excluded operand, the base was granted through a type-bound...

rsync: rsync: Memory corruption via crafted file entries

A flaw was found in rsync. This out-of-bounds write vulnerability allows attackers to corrupt memory by triggering specific processing on specially crafted file entries when hard-link preservation is not active. This can lead to denial of service or other unpredictable system behavior...

rsync: rsync: Memory corruption via crafted file entries

A flaw was found in rsync. This out-of-bounds write vulnerability allows attackers to corrupt memory by triggering specific processing on specially crafted file entries when hard-link preservation is not active. This can lead to denial of service or other unpredictable system behavior...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Workarounds for stalls caused by disabling sticky operations. It is known that the sticky mode of the NIX SQ manager can cause stalls when multiple SQs share an SMQ and transmit concurrently. Additionally, PSE ma...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: prevents underflow of lockedvm via exec When a vfio container is preserved during execution, the task does not change. Instead, a new memory page is allocated with lockedvm=0, and the counter from existing DMA mapping...

CVE-2026-89568 kho: fix size calculation in kho_preserved_memory_reserve()

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

Improper Preservation Of Message Metadata

Spring Integration is vulnerable to improper preservation of message metadata. The vulnerability is due to reply and propagated headers being copied from the most recently consumed upstream message when .fluxTransform processes raw payloads asynchronously or out of order, which allows an attacker...

Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation bsc1273100. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:4026-1 Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: Privilege Escalation Vulnerability via SUID/SGID Bit Preservation bsc1273100...

SUSE-SU-2026:23469-1 Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation bsc1273100...

SUSE-SU-2026:23618-1 Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation bsc1273100...