hcon2026hwctf

Hardware Hacking CTF hcon2026hwctf If you’re into hardware CTFs, here’s the first public challenge from HC0N CTF 2026 featuring RISC-V RP2350 exploitation challenges low level We’ve tried to make the challenge not too elitist or difficult, so that the hundreds of conference participants have a...

mojo-v

Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...

riscv-isa-sim

Spike RISC-V ISA 模拟器 关于 Spike，即 RISC-V ISA 模拟器，实现了一个或多个 RISC-V hart 的功能模型。它的名字来源于用于庆祝美国横贯大陆铁路竣工的金色道钉。 Spike 支持以下 RISC-V ISA 特性： RV32I 和 RV64I 基础 ISA，v2.1 RV32E 和 RV64E 基础 ISA，v1.9 Zifencei 扩展，v2.0 Zicsr 扩展，v2.0 Zicntr 扩展，v2.0 M 扩展，v2.0 A 扩展，v2.1 B 扩展，v1.0 F 扩展，v2.2 D 扩展，v2.2 Q 扩展，v2.2 C 扩展，v2.0...

CVE-2003-0264_EXPLOIT

CVE-2003-0264EXPLOIT Desbordamiento de búfer en Seattle Lab Mail SLmail 5.5 - POP3 Desbordamiento de búfer simple basado en pila, paso a paso 1 FUZZEAR la Aplicación En el primer paso, aplicaremos fuzzing a la aplicación con un simple script de Spike mientras tanto, también tendremos SLmail adjun...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 es una vulnerabilidad de Denegación de Servicio no autenticada en versiones de syslog-ng anteriores a la 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Pasos para reproducir 1...

Astra Linux – Vulnerability in Linux

A remote denial-of-service vulnerability was discovered in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit encounters an unknown state while attempting to parse SKBs that are not present in the queue. Sending two small UDP packets to a system with a UDP interface causes the...

The vulnerability of the Microchip SAMA5D4 microcontroller lies in its improper protection against voltage spikes and clock frequency fluctuations, allowing attackers to execute arbitrary code.

The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100532)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100532 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/rt: Have RTPUSHIPI be default off for non PREEMPTRT RT migration is done aggressively. When...

io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

A flaw was found in Netty, a network application framework. A remote attacker, by sending a specially crafted SPDY/3.1 SETTINGS frame, could cause the SPDY SETTINGS decoder to create a large number of map entries. This excessive processing and memory allocation can lead to a denial of service DoS...

Security Bulletin: IBM WebSphere Automation is vulnerable to multiple CVEs affecting multiple mongo packages within MongoDB

Summary IBM WebSphere Automation is vulnerable to multiple CVEs affecting the mongod, mongodb & mongos packages within MongoDB. Vulnerability Details CVEID:CVE-2026-8053 DESCRIPTION: An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database writ...

PT-2026-63478

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An unauthenticated remote client can cause excessive CPU consumption on a server by sending a specific combination of parameters to the hello command in exhaust mode. The server's handling of...

EUVD-2025-210181

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

CVE-2025-69168

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

CVE-2025-69168: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

CVE-2025-69168

CVE-2025-69168 affects the WordPress Spike theme up to version 1.2, with an unauthenticated Local File Inclusion vulnerability. The entry notes LFI without authentication, implying an attacker could access local files. The CVSS 3.1 data (Patchstack) assigns a base score of 8.1 (HIGH) with NETWORK...

CVE-2025-69168 WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

CVE-2025-69168 WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Spike versions = 1.2...

PT-2026-43064

Name of the Vulnerable Software and Affected Versions hackney versions 2.0.0-beta.1 through 4.0.0 Description An infinite loop exists in the Alt-Svc response header parser within src/hackney altsvc.erl. When the parse token/2 function receives a byte that is not a token, whitespace, or comma such...

MGASA-2026-0152 Updated bind packages fix security vulnerabilities

It was discovered that bind contained a vulnerability where a Malformed BRID/HHIT record can cause named to terminate unexpectedly CVE-2025-13878. If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-on...