gdid-reversal

Windows GDID 完整分析报告 全局设备标识符完全逆向工程 -8a2be2 -0078d6 微软的“全局设备标识符”——2026年7月Scattered Spider起诉书中提到的持久性Windows指纹——实际是如何生成、存储和传输的。 TL;DR !NOTE 以下内容属实，但缺少部分信息。无论是否使用MSA登录，你都会拥有一个GDID。我发帖时并未意识到这一点，但后来查证了。CDP有一个匿名设备路径，如果未连接MSA则会使用该路径。底层系统在事实上仍然是正确的，只是缺少了一些内容。 GDID是真实的遥测项。 它出现在美国联邦刑事起诉书（ United States v...

CVE-2022-39073

CVE-2022-39073 Detalles del firmware: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Requisitos previos requests pip install requests Inyección de comandos La vulnerabilidad es una inyección de comandos compartida entre el binario ztenetlinkdetect y el manejador...

CVE-2026-100103

Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Investigación de seguridad y técnicas de explotación para sistemas IoT, embebidos, industriales y automotrices. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTIC...

The_Automotive_Threat_Modeling_Template

Antecedentes Un taller de modelado de amenazas para tecnologías relacionadas con la automoción requiere DFD con elementos personalizados, amenazas adaptadas y recomendaciones específicas. La falta de una plantilla específica para el modelado de amenazas de automoción dio lugar al desarrollo de la...

AlmaLinux 9.2 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1783345013)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783345013 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: vsock: Remove the socket from the connected list when the connect operation is interrupted by a signal. The vsockconnect function expects that the socket might already be in the TCPESTABLISHED state when the connect operation is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: Added a check for mgmtallocskb in mgmtdeviceconnected. Added a check on the return value of mgmtallocskb in mgmtdeviceconnected to prevent null pointer dereferencing...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not finalize the CSA in IBSS mode if the state is disconnected. When we are not connected to a channel, sending the “switch” announcement doesn’t make any sense. The BSS list is empty in that case. This causes...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121 – Fixed invalid connector dereference. Fixed the issue of NULL pointer dereference when no monitor is connected, and when the sound card is opened from userspace. Instead, an empty buffer containing zeros is...

CVE-2026-69625

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...

CVE-2026-69267

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-68847

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68824

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

EUVD-2026-73550

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73003

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-69470

Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...

EUVD-2026-72988

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

EUVD-2026-73212

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-69267

CVE-2026-69267 is an information disclosure vulnerability in Windows Connected User Experiences and Telemetry , caused by insufficient granularity of access control . An authorized local attacker can leverage this flaw to disclose information, with a CVSS 3.1 score of 6.5 (MEDIUM) and a scope cha...