CVE-2026-47888

A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service. Mitigation Disable...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

PMD

実践的マルウェア開発 演習 1 - 環境セットアップ 1. ハイパーバイザー内に Windows 仮想マシンをセットアップします。 a. ベースインストールのスナップショットを必ず取得してください。 2. Visual Studio 2022 をダウンロードしてインストールします - https://visualstudio.microsoft.com/vs/ a. インストール時に Desktop development with C++ ワークロードを選択します 3. 以下をダウンロードしてインストールします: DebugView++ -...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

EXIM-4.87-CVE-2019-10149

EXIM-4.87-CVE-2019-10149 教育目的のラボをセットアップする...

CVE-2025-55182-Researching-process

CVE-2025-55182 研究リポジトリ 倫理的免責事項 このリポジトリは、防御的サイバーセキュリティ研究 および教育目的のみに特化しています。すべてのコンテンツは以下に焦点を当てています: 防御目的での脆弱性の理解 検知メカニズムの開発 緩和策の実装 セキュリティ意識の向上 この情報を不正アクセス、悪意のある活動、または違法な目的に使用しないでください 。 概要 このリポジトリには、CVE-2025-55182 に関する包括的な調査とドキュメントが含まれています。この脆弱性は、適切な防御と緩和のために徹底的な分析と理解を必要とします。 クイックリンク 技術分析 ラボ構築ガイド...

AZL-102260 CVE-2026-93090 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...

AZL-102869 CVE-2026-90255 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix the SCO setup context lifetime hcisetupsync queues a connhandlet with a NULL destroy callback, so the context is only freed if hcienhancedsetupsync actually runs. An entry that is cancelled instead is...

CVE-2026-90255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix the SCO setup context lifetime hcisetupsync queues a connhandlet with a NULL destroy callback, so the context is only freed if hcienhancedsetupsync actually runs. An entry that is cancelled instead is...

DEBIAN-CVE-2026-90255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix the SCO setup context lifetime hcisetupsync queues a connhandlet with a NULL destroy callback, so the context is only freed if hcienhancedsetupsync actually runs. An entry that is cancelled instead is...

CVE-2026-93093

CVE-2026-93093 affects the Linux kernel's firmware/arm_scmi driver. The root cause is an ordering flaw: transport setup routines (mailbox_chan_setup() and smc_chan_setup()) can enable interrupt delivery or register callbacks before the SCMI channel state (the cinfo pointer and cinfo->handle) i...

CVE-2026-93090

CVE-2026-93090 affects the ARM SCMI (System Control and Management Interface) firmware driver in the Linux kernel . The root cause is a failure-handling defect in scmi_channels_setup(): if this function fails after the common BASE channel or earlier protocol channels have already been registered ...

EUVD-2026-82198

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been registered in the TX/RX IDRs. Route this failure through the existing...

CVE-2025-55182-Researching-process

CVE-2025-55182 研究リポジトリ 倫理的免責事項 このリポジトリは、防御的なサイバーセキュリティ研究 および教育目的のみに使用されます。すべてのコンテンツは以下に焦点を当てています: 防御目的の脆弱性の理解 検出メカニズムの開発 緩和戦略の実装 セキュリティ意識の向上 この情報を 許可されていないアクセス、悪意のある活動、または違法な目的に使用しないでください 。 概要 このリポジトリには、CVE-2025-55182 に関する包括的な研究とドキュメントが含まれています。この脆弱性は、適切な防御と緩和のために徹底的な分析と理解が必要です。 クイックリンク 技術的分析...

CVE-2026-92952

vm2 versions 3.11.4 through 3.11.6 incompletely filter Node.js registered internal symbols across the sandbox boundary. The extraction filters in lib/setup-sandbox.js and the cross-realm symbol checks and write traps in lib/bridge.js use a fixed list of known dangerous registered symbols that omi...

CVE-2026-92962 vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment lineslines.length = value rather than a prototype-bypassing...

CVE-2026-92962 vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment lineslines.length = value rather than a prototype-bypassing...

CVE-2026-92962 vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment lineslines.length = value rather than a prototype-bypassing...

CVE-2026-92962

vm2 is a JavaScript sandbox for running untrusted code. In versions up to and including 3.11.3 , the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment (lines[lines.length] = value) instead of a prototype-bypassing Ref...

EUVD-2026-81603

vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions = 3.10.0 and = 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handle...