BugBuntu

BugBuntu Linux v0.1.2 こんにちは、これはBugBuntuの最初のアルファベータテストバージョンです。 この小さなプロジェクトは、King of Bug BountyリポジトリのTipsに基づいています。 BugBuntuは、Ubuntu 18.04をベースにしたカスタマイズされたディストリビューションで、Bug Bountyツールに特化しています。 インストールされているツール（一部）: Amass Anew Anti-burl Assetfinder CF-check Chaos Dalfox DNSgen Filter-resolved Findomain Fu...

@nocobase/devtools (>=2.0.0-alpha.2, <=2.1.0-beta.44), @nocobase/test (>=2.0.0-alpha.2, <=2.1.0-beta.44) potentially affected by unknown CVE via @nocobase/server (>=2.0.0, <=2.1.0-beta.44)

@nocobase/server NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.1.0-beta.44 Source cves: unknown CVE Source advisory: OSV:GHSA-GHVF-QF6H-G8X5...

SUSE CVE-2025-40281

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctptransportupdaterto syzbot reported a possible shift-out-of-bounds 1 Blamed commit added rtoalphamax and rtobetamax set to 1000. It is unclear if some sctp users are setting very...

The vulnerability of the sctp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sctp component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the procsctpdoalphabeta function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Internet Bug Bounty: CVE-2021-3711: SM2 decrypt buffer overflow

CVE-2021-3711 In order to decrypt SM2 encrypted data an application is expected to call the API function EVPPKEYdecrypt. Typically an application will call this function twice. The first time, on entry, the "out" parameter can be NULL and, on exit, the "outlen" parameter is populated with the...