context-segmentation

SLM 代理的上下文分割 这是科学论文中提出的解决方案的实现：Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks 设置 确保你已安装 Python 3.12.3+ 以及 Docker engine Python 环境 root@kitploit: python3 -m venv .venv source .venv/bin/activate python3 -m pip install -r requirements.txt llama.cpp 使用 Vulkan 启...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

A null pointer dereference was detected in the Linux kernel’s Integrated Sensor Hub ISH driver. This issue could allow a local user to crash the system...

CVE-2026-54218

Use of hard-coded cryptographic key vulnerability in Tobit Laboratories AG TeamDavid's Webbox. For users created locally in David, passwords are stored in various files using only obfuscation. Any user with access to the server’s file system, or who can otherwise extract files from the server see...

EUVD-2026-44109

Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...

EUVD-2026-44071

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...

EUVD-2026-44221

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...

EUVD-2026-44183

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-58165

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS. A heap-based buffer overflow occurs when a program writes more data to a heap memory...

PT-2026-58311

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-58229

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which allows an authorized attacker to elevate privileges locally. This flaw can enable an attacker with low-privilege access to gain...

PT-2026-58280

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...

PT-2026-58256

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

PT-2026-58536

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-58810

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcp C2d. Performing a manipulation of the argument filePath results in path traversal. The attack requires a local...

PT-2026-58553

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office, which could allow an unauthorized attacker to execute code locally. A heap-based buffer overflow occurs when a program writes...

MAL-2026-10505 Malicious code in express-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901c68ddbe24451843ae250e4fa71b40b1d4f86d1c81a62bc8f313a55701b7d3 package.json declares postinstall=node index.js. index.js is heavily obfuscated obfuscator.io rotated string-array with RC4-based decoders hiding all...

PYSEC-2026-1523 Langflow vulnerable to remote code execution

langflow =1.0.18 is vulnerable to Remote Code Execution RCE as any component provided the code functionality and the components run on the local machine rather than in a sandbox...

CVE-2026-48192

A vulnerability has been identified in Mendix Studio Pro 10.11 All versions, Mendix Studio Pro 10.12 All versions, Mendix Studio Pro 10.13 All versions, Mendix Studio Pro 10.14 All versions, Mendix Studio Pro 10.15 All versions, Mendix Studio Pro 10.16 All versions, Mendix Studio Pro 10.17 All...

CVE-2025-7958

Summary (CVE-2025-7958): A code injection vulnerability exists in Trellix Network Security CM and NX. A locally authenticated admin user can trigger arbitrary code execution via the web interface and Alert artifact details. The issue is described as enabling remote-like control within the device ...