birp

大型机侦察与攻破 BIRP 作者：@singe Dominic White @ SensePost 概述 BIRP 是一款能协助对通过 TN3270 服务的大型机应用进行安全评估的工具。正如 BURP 及其他 Web 应用代理为 Web 应用评估所做的那样，BIRP 旨在为 TN3270 应用评估提供类似功能。同时，与 Web 应用类似，能够查看和修改那些应用开发者以为不可见或不可修改的字段，使得安全假设得以被绕过。 具体而言，BIRP 为有志于 TN3270...

DC30_Workshop

DEF CON 30 研讨会大型机容器 这里的脚本用于为 DEFCON 30 研讨会构建 MVS 3.8j 虚拟大型机。 感谢您关注 DEFCON 30 大型机缓冲区溢出研讨会。 使用 Docker 此 Docker 容器包含学习 MVS 缓冲区溢出所需的全部内容！ 要开始课程，请运行容器并访问 http://localhost:8080 要运行容器，请使用以下命令，确保将 $pwd/docker 改为适合您系统的文件夹。$pwd 会将 Docker 卷放在当前工作文件夹中。 最小容器 如果您只想自包含运行，请使用此命令。⚠️ 如果您删除并重新启动容器，您将丢失对大型机环境所做的所有更改。...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: s390/qeth: fixed a use-after-free in hsci KASAN identified that the address was dereferenced after br2deveventwork was freed. ================================================================== BUG: KASAN: use-after-free in...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: s390/dasd: Fixed a potential memory leak in dasdeckdinit. The dasdreservereq resource is allocated before dasdvolinforeq, and it also needs to be freed before the error is returned, just like in the other cases within this...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw was discovered in the s390 eBPF JIT mechanism within bpfjitinsn in the arch/s390/net/bpfjitcomp.c file of the Linux kernel. In this flaw, a local attacker with special user privileges can bypass the verifier, potentially leading to confidentiality issues...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

EUVD-2026-50406

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

CVE-2026-64559 s390/pkey: Check length in PKEY_VERIFYPROTK ioctl

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...

CVE-2026-64211

A flaw was found in the Linux kernel. During certain CPU state transitions, the kernel's srcustruct mechanism may attempt to schedule tasks on processors that are not active or will never be online. This incorrect scheduling of workqueue handlers can lead to system unresponsiveness, specifically...

PT-2026-64590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 architecture where the load unaligned zeropad function reads eight bytes from unaligned addresses, which may cross page boundaries. While the function handles...

Linux Distros Unpatched Vulnerability : CVE-2026-64369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions...

PT-2026-64326

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Sleepable Read-Copy Update SRCU mechanism where an srcu struct structure, while transitioning from CPU-0 to all-CPUs state, may attempt to invoke callbacks on CPUs...

SUSE CVE-2026-53110

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Zero-extend bpf prog return values and kfunc arguments s390x ABI requires callers to zero-extend unsigned arguments and sign-extend signed arguments, and callees to zero-extend unsigned return values and sign-extend...

KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic

...

CVE-2026-35294

Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware component: Mainframe Connectors. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-35294: Undefined Security Weakness

Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware component: Mainframe Connectors. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Security Bulletin: IBM z/TPF Development is affected by multiple vulnerabilities reported in the axios package

Summary Multiple vulnerabilities were identified in the open-source package axios version 1.15.0, which provides the HTTPS/HTTP client used by the extension. Fixes for these vulnerabilities were made available in axios version 1.15.2. Vulnerability Details CVEID:CVE-2026-42033 DESCRIPTION: Axios ...

USN-8277-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...

CVE-2026-23773

Dell Disk Library for Mainframe, versions DLm 8700/2700 contains a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...