[SECURITY] Fedora 45 Update: open-vm-tools-13.1.0-9.fc45

The open-vm-tools project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and...

[SECURITY] Fedora 45 Update: libvirt-12.6.0-2.fc45

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

ESXi_ransomware_bitcoinWallets

背景 https://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ https://twitter.com/ValeryMarchive/status/1621528499315150849 勒索信示例： 受害者（目前） 已使用的钱包（目前）1. 1N8v8sRa2RdYq4xUUwpEePFT34TMzesPUx 2. 15vx9oDSQTJuAoYCL1VwzVBDgKYexRHpyC 3. 15KehiyPFC6uSTu4JM7B6fEhstXbCHKQna 4...

CVE-2023-54405 H3C CVM Unauthenticated File Upload via fileUpload/upload Token

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

CVE-2023-54405 H3C CVM Unauthenticated File Upload via fileUpload/upload Token

H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload endpoint that allows remote attackers to write arbitrary files by manipulating the caller-supplied token parameter...

vmware-exploitation

VMware 漏洞利用 与 VMware 逃逸漏洞利用相关的链接合集。 欢迎提交 Pull Request。 在 Twitter 上关注 @andreyknvl 或在 Mastodon 上关注 @[email protected] 以获取更新通知。 研究 2024 "串联 N-day 漏洞以攻陷一切": "第 4 部分 — VMware Workstation 信息泄漏", "第 5 部分 — VMware Workstation 客户机到宿主机逃逸" 文章 "揭示虚拟化的裂缝，掌控宿主机系统 — VMware Workstation 逃逸" 幻灯片 "我发现的 VMWare...

qemu-t8030

QEMU README QEMU は汎用的でオープンソースのマシン＆ユーザースペースエミュレータであり、 仮想化ソフトウェアです。 QEMU はハードウェア仮想化支援機能を必要とせず、ソフトウェアのみでマシン全体を エミュレートすることができます。動的変換を用いることで、非常に優れた性能を 実現します。また、QEMU は Xen や KVM ハイパーバイザと統合し、ハイパーバイザが CPU を管理する一方でエミュレートされたハードウェアを提供することも可能です。 ハイパーバイザのサポートがある場合、QEMU は CPU に関してネイティブに近い性能を 達成できます。QEMU が CPU...

GoDefender

🛡️ GoDefender 🛡️ 強力なGoベースのセキュリティツールキット。デバッグ、仮想化、DLLインジェクション攻撃を検出・防御するために設計されています。GoDefenderは、リバースエンジニアリングや解析を著しく困難にする包括的な保護メカニズムを提供します。 ⚠️ Windows専用 - Windowsシステム向けに設計 🚀 クイックスタート install.bat 機能 アンチ仮想化 VMware検出（ビデオコントローラ解析） VirtualBox検出（ドライバおよびファイルスキャン） KVM検出（ハイパーバイザ識別） QEMU検出（エミュレータ検出）...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2021_4056)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214056 advisory. kernel: use-after-free in drivers/infiniband/core/ucma.c ctx use-after-free CVE-2020-36385 kernel: out-of-bounds write due to a heap buffer overflow in...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc (crlsa-2021_3547)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213547 advisory. kernel: SVM nested virtualization issue in KVM AVIC support CVE-2021-3653 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc (crlsa-2021_3548)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213548 advisory. kernel: SVM nested virtualization issue in KVM AVIC support CVE-2021-3653 Tenable has extracted the preceding description block directly from the CIQ security...

Security Bulletin: This Power System update is being released to address CVE-2026-16678

Summary IBM Power Systems Firmware could allow a remote authenticated attacker to cause a denial of service by exhausting connection resources due to improper resource management. Vulnerability Details CVEID:CVE-2026-16678 DESCRIPTION: IBM Power Systems Firmware could allow a remote authenticated...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786761805)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786761805 advisory. - A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown ...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Red Hat OpenShift Virtualization release v4.18 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Red Hat OpenShift Virtualization release v4.18 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.21 Images

Red Hat OpenShift Virtualization release v4.21 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.20 Images

Red Hat OpenShift Virtualization release v4.20 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.12 Images

Red Hat OpenShift Virtualization release v4.12 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.16 Images

Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.22 Images

Red Hat OpenShift Virtualization release v4.22 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...