Security Bulletin: IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions (CVE-2026-87958)

Summary IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions CVE-2026-87958 Vulnerability Details CVEID:CVE-2026-87958 DESCRIPTION: IBM Db2 is vulnerable to a denial of service where a specific...

Security Bulletin: IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system (CVE-2026-86087)

Summary IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system CVE-2026-86087 Vulnerability Details CVEID:CVE-2026-86087 DESCRIPTION: IBM Db2 could allow an authenticated user to send a specially crafted request to write arbitrary...

Security Bulletin: IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption (CVE-2026-17463)

Summary IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption CVE-2026-17463 Vulnerability Details CVEID:CVE-2026-17463 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote authenticated...

Security Bulletin: IBM® Db2® is affected by a vulnerability in Pacemaker (CVE-2026-10649)

Summary IBM® Db2® is affected by a vulnerability in Pacemaker CVE-2026-10649 Vulnerability Details CVEID:CVE-2026-10649 DESCRIPTION: A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By...

Security Bulletin: IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference (CVE-2026-16702)

Summary IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference CVE-2026-16702 Vulnerability Details CVEID:CVE-2026-16702 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a remote...

GHSA-7GHQ-V6JF-G56C Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

Summary There is a medium severity vulnerability in Traefik's HTTP/3 entry points: the respondingTimeouts settings were not applied to the HTTP/3 request path. readTimeout in particular is on by default at 60s and is documented as bounding the time to read the entire request including its body, b...

Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded

Summary There is a medium severity vulnerability in Traefik's HTTP/3 entry points: the respondingTimeouts settings were not applied to the HTTP/3 request path. readTimeout in particular is on by default at 60s and is documented as bounding the time to read the entire request including its body, b...

cve-2026-47627

CVE-2026-47627 — NVIDIA Triton Inference Server 路径遍历 → DoS（Zip-Slip） 本仓库包含完整的研究报告与 PoC（镜像nvcr.io/nvidia/tritonserver:26.05-py3 / server v2.69.0）。仓库已配置为始终 explicit 模式，以便 PoC 无需重启即可通过 gRPC 执行。 目录 1. CVE 摘要 2. 实验环境 3. 漏洞剖析 4. 根因分析（26.05 → 26.06 差异对比） 5. 利用路径：哪些真正受影响？ 6. 主要 PoC：通过 EXECUTIONENVPATH 实现...

brutus v1.15.0

Brutus "Et tu, Brute?" — The last words before credentials fall. Modern credential testing tool in pure Go Installation • Quick Start • Pipeline • Protocols • Enumeration • Proxy • Library Overview Brutus is a multi-protocol authentication testing tool designed to address a critical gap in...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/...

Security Bulletin: Updating Java in Identity Insight 9.0.0.1 for security update

Summary Identity Insight customers are advised to update OpenJDK 8 to version 8.0.504 for the security update in Java. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphere...

Security Bulletin: Updating Java in Identity Insight 10.0.0.0 for security update

Summary Identity Insight customers are advised to update OpenJDK 17 to version 17.0.20.10. for the security update in Java. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM InfoSphe...

bip

Bip Bip は、IDA を操作するための python の使用を簡素化することを目的としたプロジェクトです。その主な目標は、IDA の対話コンソールでの python の使用とプラグインの作成を容易にすることです。より一般的には、python API を通じて行われる反復的なタスクを自動化することを目的としています。 Bip はまた、よりオブジェクト指向で "python-like" な API と 本物の ドキュメントを提供するために開発されています。...

Security Bulletin: Updating IBM WebSphere Liberty Profile in Identity Insight for security update

Summary Identity Insight customers are advised to update IBM WebSphere Liberty Profile WLP to version 26.0.0.9 for security update in WLP. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|-...

K000163277: Linux kernel vulnerability CVE-2026-43038

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach Sashiko AI-review observed: In ip6errgenicmpv6unreach, the skb is an outer IPv4 ICMP error packet where its cb contains an IPv4 inetskbparm. When s...

PowerShell-Suite

PowerShell-Suite 優れたツールやリソースがオンラインにあり、PowerShellでほとんどすべてのタスクを達成できます。しかしながら、特定の目的のためにユーティリティをスクリプトでまとめたり、存在論的なギャップを埋める必要がある場合もあります。これは、私が楽しみのため、または特定の用途を念頭に置いてまとめたPowerShellユーティリティのコレクションです。 したがって、それらから得られる成果は人それぞれ異なるかもしれませんが、遠慮なく問題を投稿したり、フォークして適用したりしてください！ Windows API PowerShellからWindows...

hooker

Hooker: 안드로이드 애플리케이션의 자동 동적 분석 Hooker 소개 기능 설명 Hooker는 안드로이드 애플리케이션의 동적 분석을 위한 오픈소스 프로젝트입니다. 이 프로젝트는 대상 애플리케이션이 수행하는 모든 API 호출을 자동으로 가로채고 수정하는 데 사용할 수 있는 다양한 도구와 애플리케이션을 제공합니다. Android Substrate 프레임워크를 활용하여 이러한 호출을 가로채고 모든 컨텍스트 정보매개변수, 반환 값 등를 집계합니다. 수집된 정보는 ElasticSearch 또는 JSON 파일에 저장할 수 있습니다. ...

DAMM

DAMM Volatility를 기반으로 구축된 오픈 소스 메모리 분석 도구입니다. 커뮤니티에 제공할 흥미로운 새로운 기술을 위한 실험장으로 의도되었습니다. 이러한 기술은 데이터 축소와 일부 전문 지식의 체계화를 통해 조사 과정을 가속화하려는 시도입니다. 목차 기능 사용법 지원 플러그인 예제 차이 분석 고유 ID 조작 필터링 경고 마무리 기능 약 30개의 Volatility 플러그인이 약 20개의 DAMM 플러그인으로 결합됨 예: pslist, psxview 및 기타 요소가 'processes' 플러그인으로 결합됨 한 번의 호출...

wificurse

이 프로그램은 무선 스테이션 범위 내에 있는 무선 액세스 포인트에서 전송되는 비콘을 수신합니다. 수신 후 프로그램은 AP의 BSSID를 추출하고 브로드캐스트 MAC 주소를 사용하여 비인증 패킷을 전송합니다. 이로 인해 공격 시점에 AP에 연결된 모든 클라이언트가 연결이 끊깁니다. 이는 교육 목적으로만 제작된 WiFi DoS 공격 도구입니다. Linux에서만 작동하며 무선 네트워크에 패킷을 주입할 수 있는 무선 카드 드라이버가 필요합니다. 사용 방법: 루트로 실행하고 첫 번째 인수로 카드 인터페이스를 입력하면 됩니다. 자동으로...

CVE-2025-9485

エクスプロイト: 署名なしJWTによる認証バイパス alg: none 1 管理者メールを主張する署名なしJWTを作成 root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header = b64uJSON.stringify alg: "none", typ: "JWT" ; const now = Math.floorDate.now/1000; const...