trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

EUVD-2026-92474

In Eclipse Che versions 7.29.0 and later, the GET /api/scm/resolve and POST /api/factory/resolver endpoints pass an attacker-controlled URL to URLFetcher.fetch, which calls new URLurl.openConnection with no scheme or host allow-list and returns the response body to the caller. Any authenticated C...

azuredevops-enum

ado-enum PAT개인 액세스 토큰을 사용하여 Azure DevOps 조직을 열거하기 위한 명령줄 도구입니다. Azure DevOps REST API를 쿼리하여 프로젝트, 리포지토리, 서비스 연결, 빌드, 빌드 아티팩트 및 보안 설정을 표시합니다. ADO 환경에 대한 공인된 보안 평가 중에 유용합니다. 범위는 ADOKit와 유사합니다. 주요 차이점: Python 구현으로 더 이식성이 뛰어나며, 읽기 전용 열거에 중점을 두고 권한 열거 기능을 제공합니다. Azure DevOps enumeration tool — project...

GitHub-gato

Gato Github Attack TOolkit Gato, 또는 GitHub Attack Toolkit은 블루팀과 공격적 보안 실무자 모두가 GitHub 조직 내에서 탈취된 개인 액세스 토큰의 영향을 평가할 수 있게 해주는 열거 및 공격 도구입니다. 이 도구는 또한 자체 호스팅 러너를 사용하는 공개 저장소를 검색하고 철저히 열거할 수 있게 해줍니다. GitHub는 자체 호스팅 러너를 비공개 저장소에만 사용할 것을 권장하지만, 수천 개의 조직이 자체 호스팅 러너를 사용하고 있습니다. 누구를 위한 도구인가요? 탈취된 클래식 PAT...

synodecrypt

SynoDecrypt 모든 Synology 암호화 아카이브SPK, PAT, ...를 해독하는 도구입니다. 리버스 엔지니어링 작업은 블로그 게시물에 설명되어 있습니다. 설치 pip install -r requirements.txt 사용법 먼저 암호화 키를 추출하여 JSON 파일예: keys.json에 넣어야 합니다. 이 JSON 파일은 다음 형식이어야 합니다: "keypairs": "keytypes": 0, 1, 2, "signing": "hexsigningkey", "master": "hexmasterkey" ,...

SUSE CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

DEBIAN-CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

DEBIAN-CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

UBUNTU-CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

UBUNTU-CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

UBUNTU-CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-97943 x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

CVE-2026-97533

The Linux kernel (x86 architecture) contains a use-after-free vulnerability in the memory management subsystem (x86/mm/pat ). The issue arises from a race condition between attribute changes and CPA collapse ; a lockless page table walker retrieves a PTE entry which can be freed by a concurrent C...

CVE-2026-97533 x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

EUVD-2026-86841

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...