super-tart-vphone-writeup

Construyendo un iPhone virtual utilizando el componente VPHONE600AP del firmware PCC lanzado recientemente Agradecimientos especiales / Reconocimientos dlevi309 Proporcionó ideas para la interacción táctil en el iPhone virtual khanhduytran0, 34306, asdfugil, verygenericname Proporcionaron otras...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

SHA256-CDP

SHA256-CDP: Proyección de Suma de Dígitos Cíclica Implementación de tablas arcoíris acelerada por GPU del marco de análisis estructural CDP para SHA-256. Construido sobre los hallazgos del artículo CDP DOI: 10.5281/zenodo.20627240, este repositorio proporciona una implementación completa y...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: dl, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips, opentofu,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: dl, cerbos-fips, pluto-fips, flux-source-controller, terraform, kserve-localmodelnode-agent-fips, k8s-agents-operator, dex, spegel, argo-workflows-fips, crossplane-provider-aws-efs, crossplane-provider-aws-workspaces-fips, crossplane-provider-aws-inspector2-fips,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: A divide error occurred in ndlabeldatainit. If a faulty CXL memory device returns a incorrect zero LSA size in its memory device information Identified Memory Device Opcode 4000h, CXL Specification 3.1,...

polychrome-rs

Polychrome This is a example on how to embed a payload into a compute shader. The payload is encrypted and decrypted on the GPU. This is not by any means a complete implementation it misses crucial OPSEC considerations. Usage Generate a payload using your preferred method i used the classic...

HPESBHF05154 rev.1 - HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server, Remote RMC file modification

Potential Security Impact: Local: Arbitrary File Modification; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to 1.77.30 HPE Compute Scale-up Server 3250 - Prior to 1.03.38 HPE Superdome Flex Server - Prio...

HPESBHF05153 rev.1 - HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution

Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to 1.77.30 HPE Compute Scale-up Server 3250 - Prior to 1.03.38 HPE Superdome Flex 280 Server - Prior to 2.17.03 HPE Superdome Fle...

CVE-2026-97422

A flaw was found in the Linux kernel. The AMD Kernel Fusion Driver amdkfd subsystem fails to enforce proper permission checks when dispatching System Management Interface SMI event notifications. A local user with access to the GPU compute device can exploit this flaw to receive event notificatio...

SQL Injection

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to SQL Injection in the Teradata compute-cluster example DAG, where user-settable Params are not properly constrained, allowing an...

CVE-2026-86843

The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...

CVE-2026-86843 Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag

The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...

CVE-2026-86843

The Apache Airflow Teradata provider is vulnerable to SQL injection because the compute-cluster example Dag allows unconstrained free-text Dag Params . These parameters are templated directly into operators that interpolate values into Teradata DDL . An attacker with permission to trigger the Dag...

CVE-2026-86843 Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag

The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...