uoftctf-2025-chals-public

トロント大学 Capture the Flag コンペティション 2025 このリポジトリには、UofTCTF 2025 のチャレンジの解答が含まれています。ほとんどのチャレンジディレクトリにはソースコードも含まれています。 チャレンジ一覧 チャレンジ名| 解答数| カテゴリ ---|---|--- Funny Cipher| 231/1510| Crypto Enchanted Oracle| 79/1510| Crypto Shuffler| 22/1510| Crypto Causation| 11/1510| Crypto Timed AES| 4/1510| Crypto...

rules

Hashcat Rules Collection An updated, curated collection of Hashcat rules for cracking complex passwords. Benchmarks credit:A1131 !NOTE Hashcat beta has introduced The Table Attack. A collection of tables can be found here. Contributors needed. 🤝 Contributing Simply fork the repo, commit your...

ROOT-OS-UBUNTU-2404-CVE-2026-45941 CVE-2026-45941 in linux - Patched by Root

Root has patched CVE-2026-45941 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-71850 Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure

Hono is a Web application framework that provides support for any JavaScript runtime. From 3.8.0 to 4.12.33, memo from hono/jsx retains the result of a server side render and reuses it for later renders with comparator equal props, and request scoped values read inside the component take no part ...

CVE-2026-66665

creationtimestamp| type| source ---|---|--- 2026-08-06 16:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggub7o5a2l 2026-08-06 21:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwsbzoi52t...

Malicious code in devplatform-jscodeshift-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b08e96920cfa51b02e6ac450e73eb86615b96651f96cd8c94f0f272880689b9 The package presents itself as a jscodeshift helper library exporting deepMerge/sleep/retry/chunk utilities, but index.js unconditionally invokes try...

CLSA-2026-1779151640 TuxCare security update for lxml (1 CVE)

TuxCare rebuilt lxml to address 1 CVE. Fixed in 4.9.4.post1+tuxcare...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

Exploit for CVE-2025-48932

CVE-2025-48932-Invision-Community-SQLi-Exploit CVE-2025-48932...

CVE-2026-67332

creationtimestamp| type| source ---|---|--- 2026-08-01 22:33:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2jmj437s22 2026-08-01 22:33:46+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3ms2jmyhpza25 2026-08-01 23:09:05+00:00| seen|...

GHSA-CG4G-M8JX-VJV2

creationtimestamp| type| source ---|---|--- 2026-07-30 18:31:07+00:00| seen| https://gist.github.com/alon710/a4455529dbdac06b73f9e7a68363941a...

GHSA-PGWH-4JJ4-QM8V

creationtimestamp| type| source ---|---|--- 2026-07-30 16:30:59+00:00| seen| https://gist.github.com/alon710/abbfb678b2ea15b959183e89124a0f42...

CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1

Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CVE-2026-12357

creationtimestamp| type| source ---|---|--- 2026-07-29 22:08:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswspnm622j...

CVE-2026-65890

creationtimestamp| type| source ---|---|--- 2026-07-29 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrs5giyvju2e 2026-07-29 14:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs6ukdypn2q 2026-08-06 08:37:07+00:00| seen|...

GHSA-FVCV-HH55-X3R4

creationtimestamp| type| source ---|---|--- 2026-07-29 08:01:20+00:00| seen| https://t.me/nxblog/1758 2026-07-30 00:02:09+00:00| seen| https://t.me/nxblog/1758 2026-08-01 20:00:05+00:00| published-proof-of-concept| https://t.me/nxblog/1758 2026-08-02 00:00:22+00:00| published-proof-of-concept|...

Build Numbers and Versions of Veeam Plug-In for Platform9

This KB article lists all versions of the Veeam Plug-In for Platform9 and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Platform9 1 Releases Veeam Plug-In for Platform9 1.0 Included with Veeam Backup & Replication 13.1 |...

MINI-F56P-W6FH-QR8F

Bulletin has no description...

GHSA-Q5FW-VPQC-FGPH

creationtimestamp| type| source ---|---|--- 2026-07-21 13:18:24+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mr5vhspcma2g...

CLEANSTART-2026-CQ01177 Security fixes for CVE-2024-38828, CVE-2024-6763, CVE-2025-11143, CVE-2026-2332, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-49268, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-w3c8-7r8f-9jp8, ghsa-x96m-rh44-vgv8 applied in versions: 5.19.3-r0, 5.19.3-r1, 6.2.6-r0

Multiple security vulnerabilities affect the activemq package. These issues are resolved in later releases. See references for individual vulnerability details...