CVE-2026-87262

CVE-2026-87262 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity to achieve high c...

CVE-2026-87259

CVE-2026-87259 affects the Engineering Communication Interface component of Oracle Agile Engineering Data Management (Oracle Supply Chain), version 6.2.1 . A low-privileged attacker with local logon access can exploit this vulnerability to achieve high confidentiality and integrity impacts , incl...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. 网络连接与 SSL/TLS 配置 通过 Process Hacker 内存分析发现，AcrStealer 使用 SSL/TLS 建立网络连接，以与其 C2 服务器进行安全通信。 关键观察： SslClientCert – 使用客户端证书进行身份验证（规避检测）。 EnabledProtocols – 指定支持的 TLS 协议（例如 TLS 1.2、1.3）。 EnabledRevertToSelfClientCertificate – 允许回退到自签名证书。 Connection / DataChunks – 表示活跃的数据传输。 Available – 待发送的数据缓冲区。...

gonc

gonc 简介 README in English 、 中文 gonc 是一个基于 Golang 的 netcat 工具，旨在更方便地建立点对点通信。其主要特点包括： 🔁 自动化内网穿透 ：零配置，双方仅需约定一个口令，使用参数-p2p既可自动发现彼此网络地址和穿透内网建立点对点连接，使用公共 STUN 和 MQTT 服务交换地址信息。 🔒 端到端双向认证的加密 ：支持 TCP 的 TLS 和 UDP 的 DTLS 加密传输，可基于口令双向身份认证。 🧩 灵活的服务配置 ：通过参数 -e 可灵活的设置为每个连接提供服务的应用程序，例如-e...

ldapsdk

Java向けUnboundID LDAP SDK LDAP SDKの最新リリースはこちらからダウンロード Java向けUnboundID LDAP SDKは、高速で強力、ユーザーフレンドリー、かつ完全に無料でオープンソースのJavaライブラリで、LDAPディレクトリサーバーと通信するために使用します。他のJavaベースのLDAP APIよりも優れたパフォーマンス、使いやすさ、および多くの機能を提供します。これはPing Identity Corporationによって開発され、Ping...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: nfc: Fixed races in nfcllcpsockget and nfcllcpsockgetsn. Sili Luo reported a race condition in nfcllcpsockget, which led to a Use-After-Value exception. The process of acquiring a reference to the socket found during a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: ipc: Fix for use-after-free in ipcmsgsendrequest The ipcmsgsendrequest function waits for a generic netlink reply using an ipcmsgtableentry on the stack. The generic netlink handler handlegenericevent/handleresponse fil...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: nfc: fixed a segfault in nfcgenldumpdevicesdone When kmalloc in nfcgenldumpdevices fails, nfcgenldumpdevicesdone causes a segfault as follows: KASAN: null-ptr-deref in range 0x0000000000000008-0x000000000000000f CPU: 0 PID: 25...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Properly clear the vmci transport packet when initializing it. In vmcitransportpacketinit, memset is used to clear the vmcitransportpacket before populating the fields, to avoid any uninitialized data remaining in the...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fixed a use-after-free in localcleanup. A use-after-free occurs in kfreeskb called from localcleanup. This can occur when killing the nfc daemon e.g., neard after detaching an nfc device. When detaching an nfc device,...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: NFC: Digital: Fixed a possible memory leak in digitaltglistenmdaa. The variable ‘params’ is allocated in digitaltglistenmdaa, but it is not freed when digitalsendcmd fails. This could lead to a memory leak. The issue is fixed by...

StealC-Stealer-RuntimeBroker-Hollowing-C2-Extraction-Payload-Extraction-Analysis

1. RuntimeBroker.exe 进程镂空与 C2 IP 地址 Process Hacker 内存分析显示，StealC Stealer 对 RuntimeBroker.exe 执行进程镂空，并与多个 C2 服务器建立连接。 关键观察： 目标进程： RuntimeBroker.exe（PID 14900）。 C2 IP 地址： http://87.120.196.171/ http://85.251.18/ http://193.148.56.97/ https://51.77.9.121/ Base64 字符串： 多个 Base64 编码字符串（可能是加密的配置数据）。...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

UBUNTU-CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

antnium

Antnium root@kitploit: Anti Tanium 一个用 Go 编写的 C2 框架和 RAT。 此源代码作为我的演讲 开发你自己的 RAT - AV 与 EDR 防御 的参考公开发布。 Antnium 旨在满足我自己的需求，而不是他人的需求。它适用于我所执行的攻击活动，但未必是一个通用型 C2 框架。 有两个组件： client.exe：真正的 RAT / beacon / agent / implant server.exe：C2 服务器 功能特性 HTTP/S 和 Websocket 通信信道 代理支持（手动、Windows、认证和 Kerberos） 命令执行 ...

EUVD-2025-210893

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2025-45480

Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary...

CVE-2026-90647

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...

CVE-2026-89174

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...