[SECURITY] Fedora 45 Update: ocaml-b0-0.0.6-3.fc45

WARNING: this package is unstable and a work in progress. Do not depend on i t. B0 describes software construction and deployments using modular and customizable definitions written in OCaml. B0 describes: - Build environments. - Software configuration, build and testing. - Source and binary...

[SECURITY] Fedora 45 Update: ocaml-bin-prot-0.17.0-14.fc45

This library contains functionality for reading and writing OCaml values in a type-safe binary protocol. These functions are extremely efficient and provide users with a convenient and safe way of performing I/O on any extensionally defined data type. This means that functions, objects, and value...

[SECURITY] Fedora 45 Update: hivex-1.3.24-23.fc45

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...

[SECURITY] Fedora 45 Update: 0install-2.18-16.fc45

Zero Install is a decentralized cross-distribution software installation system. Other features include full support for shared libraries with a SAT solver for dependency resolution, sharing between users, and integration with native platform package managers. It supports both binary and source...

fsop-finder

Glibc FSOP 代码路径查找器 查找 GLIBC Libio 中能够劫持控制流和栈指针的 FSOP 代码路径。 描述： 1. 安装此插件 2. 在 Binary ninja 中打开 libc.so.6，然后点击 Tools - Plugins - Find FSOP code path 3. 你应该能在 Log 窗口中看到结果 有用的发现： // GLIBC 2.34-0ubuntu3.2 3. IOwfileunderflowmmap@0x86030 - IOwdoallocbuf@0x83be0 0x8614d: call0x83be0 RIP/RDI DATAFLOW: rb...

ColonelClustered

Colonel Clustered - 响应相似度聚类 v1.0.1 一个用于对 HTTP 响应进行聚类以发现异常值的 Burp Suite 扩展。 简介 这是我多年来一直想构建的一个插件，原因很简单：我对我们在 Burp intruder 中分析模糊测试攻击结果的方式感到有些恼火。在模糊测试攻击中，我们通常寻找服务器响应的变化。而我们通过查看状态码、响应时间和响应大小来寻找这些差异。所有这些都是对响应内容的间接度量。当然，作为渗透测试人员，我们没有时间去阅读数千个服务器的内容来寻找响应内容的差异。但我们当然可以让算法替我们完成这件事。...

WebSocketTurboIntruder

WebSocket Turbo Intruder 一个用于使用自定义 Python 代码对 WebSocket 消息进行模糊测试的扩展。 使用方法 Intruder 工具 1. 右键点击一条 WebSocket 消息，然后导航到 Extensions WebSocket Turbo Intruder Send to WebSocket Turbo Intruder。 如果在发送前高亮了消息的一部分，高亮的内容将被替换为 %s。 2. 从下拉列表中选择一个模板。 3. 修改 Python 代码以适配你的使用场景。 4. 开始攻击。 注意：这将建立一个新的 WebSocket 连接来发送消息...

SUSE SLES16 Security Update : sccache (SUSE-SU-2026:23983-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23983-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541:...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can cra...

PT-2026-106710

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description An out-of-bounds read exists in the ReadOnlyDict::load function within readonly ws.cpp. The issue occurs when loading a binary .rws dictionary file, as the software uses offset fields from the...

Linux Distros Unpatched Vulnerability : CVE-2026-59783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability...

Linux Distros Unpatched Vulnerability : CVE-2026-102282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm- zip applies the Unix permission bits stored in a zip...

CVE-2026-105789: Improper Neutralization of Argument Delimiters in a Command

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the executecommand tool in ufo/client/mcp/httpservers/linuxmcpserver.py treats sort and uniq as read-only commands while the free-form command parameter can select their file-output...

Linux Distros Unpatched Vulnerability : CVE-2026-75819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fiel...

PT-2026-106739

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute command tool in ufo/client/mcp/http servers/linux mcp server.py treats sort and uniq as read-only commands while the free-form command parameter can select their...

CVE-2026-75819: Out-of-bounds Read

GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load in readonlyws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file header as byte indices into a heap buffer without validating their bounds. An attacker can trigger this by convincing a...

How to fix a bug in a fix

Posted by Natalie Silvanovich Project Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are...

What Response Marginals Miss: Adaptive Query Complexity of Functional Backdoor Recovery

Functional backdoor recovery finds any trigger whose attack success rate is at least a given threshold rather than to recover the planted trigger. We study the minimum number of queries required for this task under label feedback which returns the predicted class label. We construct two finite...

Local Privilege Escalation via Command Injection in Brocade Fabric OS Diagnostic Utility

: An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking underlying system commands through a shell interpreter. A...

PT-2026-107375

Root Cause File: internal/auditlog/formats.go — multiple sites write attacker-influenced bytes into the Native audit-log stream without escaping r or : go // Part B — request headers lines 72–80 for k, vv := range al.Transaction.Request.Headers for , v := range vv res.WriteByte' ' res.WriteString...