CodeAnalysis

TCA、Tencent Cloud Code Analysis コードネーム: CodeDog English | 简体中文 TCA公式 公式サイト: https://tca.tencent.com 公式紹介: https://cloud.tencent.com/product/tcap TCA CNB Pages（より高速なインターネット速度） 国内: https://cnb.cool/tencent/cloud/tca/code-analysis 国内: https://cnb.cool/tencent/cloud/tca TCA Github Pages 海外:...

AI-Infra-Guard

📖 ドキュメント | 🌐 🇬🇧 English · 🇨🇳 中文 · 🇯🇵 日本語 · 🇪🇸 Español · 🇩🇪 Deutsch · 🇫🇷 Français · 🇰🇷 한국어 · 🇧🇷 Português · 🇷🇺 Русский...

Cairn

Cairn AIペネトレーションテストだけではない — 一般的な状態空間探索へ Cairnは汎用的な問題解決エンジンです。 役割もワークフローも定義しません。起点と目標が与えられると、未知の状態空間を通る経路を探索します。 AIペネトレーションテストはそのような問題の一つであり、実証済みのものです。 Cairnとは？...

qq-tim-elevation

腾讯 QQ/TIM 本地权限提升 受影响产品： QQ 9.7.1.28940 9.7.8.29039 TIM 3.4.5.22071 3.4.7.22084 受影响组件： QQProtect.exe 4.5.0.9424（位于 TIM 3.4.5.22071 中） QQProtect.exe 4.5.0.9426（位于 QQ 9.7.1.28940 中） QQProtectEngine.dll 4.5.0.9424（位于 TIM 3.4.5.22071 中） QQProtectEngine.dll 4.5.0.9426（位于 QQ 9.7.1.28940 中） 1. 概述 腾讯 QQ 和...

cloud-audit

项目简介 cloud-audit （云安全审计助手）是检测公有云厂商AK/SK泄漏被利用的工具，通过定期调用云平台接口审计日志，基于异常行为/黑特征/基线发现疑似入侵行为。 当前仅支持腾讯云与AWS 特性 支持检测腾讯云平台AK/SK利用告警（异常行为） 调用AK/SK创建命令/执行命令监控 调用AK/SK添加子账户/删除子账户监控 调用AK/SK跨region列DB 调用AK/SK跨region列实例 支持检测AWS云平台AK/SK利用告警（基线检测） 调用AK/SK创建用户监控 调用AK/SK列用户监控 调用AK/SK列S3监控 调用AK/SK列DB监控 调用AK/SK提权监控...

CVE-2025-63946-Tencent-PC-Manager-EoP

CVE-2025-63946 腾讯电脑管家EoP 版本：PCManager版本低于或等于17.10.28554.205 摘要：我在腾讯电脑管家中发现一个漏洞，其中C:\Windows\Temp下的文件和目录被不安全地处理。攻击者可以利用符号链接攻击，强制一个SYSTEM权限的进程删除任意文件，从而导致本地权限提升。在扫描过程中，以NT AUTHORITY\SYSTEM运行的QQPCRtp.exe会将扫描的文件移动到该临时目录，并在扫描完成后删除它们。 观察到，当我们开始扫描驱动器时，进程"QQPCRTP.exe"会以SYSTEM权限执行以下操作： 1...

CVE-2025-63945-Tencent-iOA-EoP

CVE-2025-63945 Tencent iOA 权限提升 版本：210.9.28693.62001 之前 摘要：我发现腾讯电脑管家存在一个漏洞，其中 C:\Windows\Temp 下的文件和目录处理不安全。攻击者可以利用符号链接（symlink）攻击，强制一个 SYSTEM 权限的进程删除任意文件，从而导致本地权限提升。具体来说，当使用“ioa”组件时，会定期启动一个名为 LegacyKBioawin.exe 的进程。在运行过程中，它会在 Temp 文件夹下创建 TencentDownload 目录，将文件下载至该目录中，然后以 SYSTEM...

CVE-2026-84809

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

TencentOS Server 4: grafana (TSSA-2026:0822)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0822 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-72565

Tencent APIJSON (up to 8.1.8) contains a SQL injection in the Map-form @having operator that bypasses per-table access control, enabling unauthenticated remote attackers to read arbitrary database tables. The APIJSONORM AbstractSQLConfig.java applies per-role allow-list checks only to the String ...

EUVD-2026-55241

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

CVE-2026-72565 Tencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form Bypass

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

TencentOS Server 3: dovecot (TSSA-2026:0810)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0810 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: bind (TSSA-2026:0787)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0787 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Silver Fox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...

TencentOS Server 4: java-8-konajdk (TSSA-2026:0760)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0760 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

TencentOS Server 3: nginx:1.24 (TSSA-2026:0618)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0618 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...