cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

super-tart-vphone-writeup

Building virtual iPhone using VPHONE600AP component of recently released PCC firmware Special Thanks / Acknowledgements dlevi309 Provided ideas for touch interaction on virtual iPhone khanhduytran0, 34306, asdfugil, verygenericname Provided other ideas for building virtual iPhone, including...

kernel: drm/amdkfd: fix SMI event cross-process information leak

A flaw was found in the Linux kernel. The AMD Kernel Fusion Driver amdkfd subsystem fails to enforce proper permission checks when dispatching System Management Interface SMI event notifications. A local user with access to the GPU compute device can exploit this flaw to receive event notificatio...

kernel: drm/amdkfd: fix SMI event cross-process information leak

A flaw was found in the Linux kernel. The AMD Kernel Fusion Driver amdkfd subsystem fails to enforce proper permission checks when dispatching System Management Interface SMI event notifications. A local user with access to the GPU compute device can exploit this flaw to receive event notificatio...

polychrome-rs

Polychrome This is a example on how to embed a payload into a compute shader. The payload is encrypted and decrypted on the GPU. This is not by any means a complete implementation it misses crucial OPSEC considerations. Usage Generate a payload using your preferred method i used the classic...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-151165)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-151165 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP pat...

CVE-2026-118687

A flaw was found in Coder. The application fails to properly validate the audience claim in Google Compute Engine GCE instance-identity JSON Web Tokens JWT during workspace agent authentication. A remote attacker who obtains an unexpired token issued for another service can replay it to obtain a...

CVE-2026-120091

A flaw was found in Temporal Server, where the Kubernetes compute provider within the Worker Service constructs its client directly from user-supplied requests rather than trusted operator configurations. An authenticated remote user with read access to a namespace can exploit this vulnerability ...

CVE-2026-122224

WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authenticated users to reach MigrateViewSet and CreateInstanceViewSet because no permissionclasses are declared, so Django REST Framework defaults to AllowAny. Attackers can send requests...

CVE-2026-65165

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...

CVE-2026-65165

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...

EUVD-2026-116015

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...

USN-8960-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Multiple devices driver; - ARM64 architecture; - EROFS file system; -...

CVE-2026-65165: NVIDIA Slurm: NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the…

NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the --distribution=arbitrary option to gain access to compute nodes outside of the current job allocation...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues as well On GFX6, the compute rings use the same CP path as the graphics ring. The only difference is that they do not support draw commands. Unlike GFX7 and newer versions, which hav...

Temporal Auto-Scaled Workers configuration error vulnerability

A security vulnerability exists in versions prior to 1.31.5 of Temporal Auto-Scaled Workers and prior to 1.32.2 of version 1.32.x. This vulnerability arises because the Kubernetes compute provider constructs the Kubernetes client using client configuration provided in callers’ requests rather tha...

CLEANSTART-2026-YF22424 Security fix for GHSA-hfvc-g4fc-pqhx applied in: prometheus-alertmanager-fips 0.32.0-r0, traefik 2.11.41-r1, etcd 3.6.9-r0, gatekeeper-fips 3.20.1-r1, grafana 12.3.6-r1, minio 0.20251015.172955-r2, gatekeeper 3.20.1-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0, loki 3.6.10-r1

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WQ89744 Security fix for GHSA-mh2q-q3fh-2475 applied in: consul 1.22.7-r0, consul 1.22.7-r2, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, minio 0.20251015.172955-r2, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0

GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OS27290 Security fix for GHSA-p77j-4mvh-x3m3 applied in: consul 1.22.5-r1, gatekeeper 3.20.1-r1, gatekeeper-fips 3.20.1-r1, minio 0.20251015.172955-r1, gcp-compute-persistent-disk-csi-driver-fips 1.25.0-r0

GHSA-p77j-4mvh-x3m3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...