32963 matches found
rehex
Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...
CVE-2025-46811-challenge
CVE-2025-46811 挑战 一个用于 CVE-2025-46811 漏洞研究的安全挑战环境。 前提条件 控制节点(Ansible 主机) 安装以下系统软件包: apt install python311 python311-pip sshpass rsync 通过 pip 安装 Ansible: pip install ansible==12.3.0 目标虚拟机 目标虚拟机必须运行 openSUSE,并满足以下配置: 1. 安装 Python 3.11: zypper ref && zypper in python311 2. 禁用防火墙: systemctl stop...
dnscrypt-autoinstall
dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...
openSUSE 16: cross-aarch64-glibc-devel / cross-ppc64le-glibc-devel / etc (openSUSE-SU-2026:21968-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21968-1 advisory. - CVE-2026-6368: invalid free via wordexp WRDEAPPEND rollback bsc1274726. - CVE-2026-6791: stack overflow in wordexp tilde expansion bsc1274723....
openSUSE 16: libtcnative-1-0 / libtcnative-1-0-devel / libtcnative-2-0 / etc (openSUSE-SU-2026:21984-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21984-1 advisory. Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. -...
openSUSE 16 Security Update : rpcbind (openSUSE-SU-2026:21975-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21975-1 advisory. This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remot...
opensuse-leap-privesc-exploit
CVE-2025-6018 + CVE-2025-6019 漏洞利用链 该利用工具是为解决一个针对 openSUSE Leap 15.6 的 HackTheBox 挑战而开发的。 致谢 本利用基于 Qualys 安全团队的原始研究: 公告:https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt CVE-2025-6018:在 openSUSE 15 的 PAM 中从低权限提升到 allowactive 的本地提权漏洞 CVE-2025-6019:通过 udisks 在 libblockdev 中从 allowactive...
CVE-2026-6018-9-Local-Privilege-Escalation-Chain
CVE-2025-6018 + CVE-2025-6019:本地权限提升链 目标操作系统: openSUSE Leap 15.x / SUSE Linux Enterprise 15.x 所需访问权限: 具有 SSH 访问权限的非特权本地用户 结果: 完整 root shell 概述 本文档详细介绍了由 Qualys 威胁研究部门发现的两个链式本地权限提升漏洞的手动利用方法: CVE-2025-6018 — 通过 /.pamenvironment 进行 PAM 环境变量注入,允许远程 SSH 用户获得通常仅保留给物理在场的控制台用户的 allowactive Polkit 状态。...
OPENSUSE-SU-2026:11949-1 python310-3.10.21-2.1 on GA media
These are all security issues fixed in the python310-3.10.21-2.1 package on the GA media of openSUSE Tumbleweed...
mistral-vibe-2.25.8-1.1 on GA media (moderate)
mistral-vibe-2.25.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11900-1 Rating: moderate Cross-References: CVE-2026-93993 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
OPENSUSE-SU-2026:11950-1 python313-3.13.15-2.1 on GA media
These are all security issues fixed in the python313-3.13.15-2.1 package on the GA media of openSUSE Tumbleweed...
Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019
脆弱性のデモを実施するための手順 脆弱性用ISOのリンク 以下のOSイメージ(openSUSE-Leap-15.6)をこのリンクからダウンロードしてください: https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso イメージのサイズは約4.4GBです その後、イメージをVagrantfileのディレクトリに配置し、Vagrantfileを編集してください(ISOPATH) インストールの依存関係 virtualbox vagra...
OPENSUSE-SU-2026:11938-1 yast2-auth-client-5.0.5-1.1 on GA media
These are all security issues fixed in the yast2-auth-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11934-1 libIex-3_4-33-3.4.15-1.1 on GA media
These are all security issues fixed in the libIex-34-33-3.4.15-1.1 package on the GA media of openSUSE Tumbleweed...
python311-3.11.16-2.1 on GA media (moderate)
python311-3.11.16-2.1 on GA media Announcement ID: openSUSE-SU-2026:11886-1 Rating: moderate Cross-References: CVE-2026-15310 CVE-2026-15806 CVE-2026-17084 CVE-2026-19672 CVSS scores: CVE-2026-15310 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2026-15806 SUSE : 5.9...
gpsd-3.27.5-4.1 on GA media (moderate)
gpsd-3.27.5-4.1 on GA media Announcement ID: openSUSE-SU-2026:11891-1 Rating: moderate Cross-References: CVE-2026-60122 CVSS scores: CVE-2026-60122 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-60122 SUSE : 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...
emacs-31.1-4.1 on GA media (moderate)
emacs-31.1-4.1 on GA media Announcement ID: openSUSE-SU-2026:11889-1 Rating: moderate Cross-References: CVE-2026-96442 CVSS scores: CVE-2026-96442 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-96442 SUSE : 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...
pcapplusplus-devel-26.07-1.1 on GA media (moderate)
pcapplusplus-devel-26.07-1.1 on GA media Announcement ID: openSUSE-SU-2026:11883-1 Rating: moderate Cross-References: CVE-2026-13587 CVE-2026-13588 CVE-2026-13589 CVE-2026-13590 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These...