libqcow

libqcow 是一个用于访问 QEMU 写时复制（QCOW）镜像文件格式的库。 项目信息： 状态：alpha 许可证：LGPL-3.0-or-later 以只读方式支持的 QCOW 格式： 版本 1 版本 2 版本 3 支持的 QCOW 格式特性： zlib DEFLATE 压缩 AES-CBC 128 位加密 后端文件（差异镜像） 不支持的 QCOW 格式特性： LUKS 加密 数据文件 镜像内快照 开发中： 文件 API 函数中的线程安全性 更多信息请参阅： 项目文档：https://github.com/libyal/libqcow/wiki/Home...

libfsntfs

libfsntfs 是一个用于访问新技术文件系统（NTFS）格式的库。 项目信息： 状态：实验性 许可证：LGPL-3.0-or-later 只读支持的 NTFS 格式： NTFS 版本 3.0 NTFS 版本 3.1 支持的 NTFS 格式特性： LZNT1 压缩 Windows Overlay Filter（WOF）压缩数据（LZX 和 LZXPRESS-Huffman） 区分大小写的目录 不支持的 NTFS 格式特性： NTFS 版本 1.0 NTFS 版本 1.1 NTFS 版本 1.2 加密文件系统（EFS） 更多信息请参阅：...

cynative

构建你自己的安全代理 面向安全代理的开源框架，可对你的基础设施进行实时、只读访问。 快速开始 · 内置代理 · 你的第一个代理 · 文档 向你的基础设施提出任何问题。 Cynative 在你的代码、云和运行时中运行前沿模型——将 GitHub、GitLab、AWS、GCP、Azure 和 Kubernetes 作为一个系统进行推理——并返回经过验证的答案。bash cynative "what in my cloud is publicly exposed that shouldn't be?" 45 个内置 agent，覆盖 AWS、GCP、Azure、GitHub 和...

CVE-2021-28663

CVE-2021-28663 针对 CVE-2021-28663 的基础信息泄露 PoC（Android 内核后门漏洞内幕） 这是针对 CVE-2021-28663 的基础 PoC。Mali GPU Android 内核驱动中存在一个设计缺陷。 1. 创建一个 GPUVA，并对其执行 mmap，这样我们就能获得物理页对应的虚拟地址。 2. 为物理页创建一个别名，但不要执行 mmap，这样 gpumapping 保持为 1。 3. 将 GPUVA 的标志修改为 BASEMEMDONTNEED。Mali 会将这些页置为可驱逐状态。 4. 由于我们已经持有别名页的 reg，现在可以对其执行...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

CVE-2026-86698

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

EUVD-2026-84539

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

CVE-2026-86698 Refresh tokens accepted as private repository credentials at the CDN

Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization membership or session has ended to keep reading the organization's private packages and their documentation tarballs via a retained refresh token. generaterefreshtoken/4 in...

CVE-2026-54076 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATESCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in engine/src/main/java/com/arcadedb/schema/LocalDocumentType.java and...

CVE-2026-54168 Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation token created during webhook processing is not scoped to the repository that triggered the event when the App is installe...

EUVD-2026-78586

Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation token created during webhook processing is not scoped to the repository that triggered the event when the App is installe...

CVE-2026-43785

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read...

EUVD-2026-77521

Description When ZooKeeper authentication is configured, Storm deliberately retains storm.zookeeper.topology.auth.payload in the topology configuration, because workers need it. Nimbus then served that configuration verbatim to any caller holding read-only topology permissions, so a user whose on...

CVE-2026-82434

Apache Storm Nimbus and the submission client disclose the storm.zookeeper.topology.auth.payload credential to callers holding only read-only topology permissions, and also write it to logs at INFO (client) and DEBUG (SASL handlers). The credential is not read-only : it carries write-capable ACLs...

CVE-2026-82434 Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs

Description When ZooKeeper authentication is configured, Storm deliberately retains storm.zookeeper.topology.auth.payload in the topology configuration, because workers need it. Nimbus then served that configuration verbatim to any caller holding read-only topology permissions, so a user whose on...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hiding the first-in-list PCIe extended capabilities There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability i.e., a capability with an ID greater than...

Astra Linux – Vulnerability in Zabbix

JavaScript preprocessing can be exploited by attackers to gain access to the file system read-only access on behalf of the user “zabbix” on the Zabbix Server or Zabbix Proxy, potentially leading to unauthorized access to sensitive data...

PT-2026-91499

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to 27 visionOS versions prior to 27 Description A permissio...

PT-2026-91237

Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned the result without redaction in the topology conf field of TopologyPageInfo. The Storm UI copied that value verbatim into the configuration field of GET /api/v1/topology/id an...

cynative v1.11.3

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...