CVE-2026-0073

ADB TLS 认证绕过利用工具 CVE-2026-0073 一个自动化的网络扫描与利用工具，针对 CVE-2026-0073 ——Android 调试桥守护进程 adbd 中的漏洞，该漏洞允许通过无线调试实现未授权的远程代码执行 RCE 及交互式 shell 访问。 此工具专门针对现代 Android 设备（Android 13+）进行了优化，具备 mDNS 自动发现 功能，可定位随机化的 ADB 端口，并提供 完全交互式的原始 PTY shell 。 🚨 漏洞概要（Android 安全公告） root@kitploit: CVE ID: CVE-2026-0073 Android 问...

GO-2026-5497 apko `DiscoverKeys` has a panic on non-rsa jwks key that causes crash during key discovery in chainguard.dev/apko

apko DiscoverKeys has a panic on non-rsa jwks key that causes crash during key discovery in chainguard.dev/apko...

CVE-2026-42576

apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, DiscoverKeys in pkg/apk/apk/implementation.go unconditionally type-asserts JWKS keys as rsa.PublicKey without checking the key type. If a repository JWKS endpoint returns a non-RSA key e.g...

CVE-2026-42576

apko allows users to build and publish OCI container images built from apk packages. Prior to version 1.2.7, DiscoverKeys in pkg/apk/apk/implementation.go unconditionally type-asserts JWKS keys as rsa.PublicKey without checking the key type. If a repository JWKS endpoint returns a non-RSA key e.g...