341 matches found
Hashcat-Cheatsheet
Hashcat-Cheatsheet Hashcat Cheatsheet for OSCP https://hashcat.net/wiki/doku.php?id=hashcat Identify Hashes hash-identifier Example Hashes: https://hashcat.net/wiki/doku.php?id=examplehashes MAX POWER! I have found that I can squeeze some more power out of my hash cracking by adding these...
domainhunter
Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...
lightbulb-framework
LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...
Notes
Security Engineering at Google: My Interview Study Notes By nolang I am a security engineer at Google and these are the notes from when I was studying for the interviews. This is my first job in security and a lot of people have asked me how I studied. My notes consist mostly of a list of terms a...
Security_Engineer_Interview_Questions
SecurityEngineerInterviewQuestions I spent a couple hours the spring of 2016 reading through Glassdoor.com to see what users submitted for security questions they'd received while interviewing for security engineer jobs. I wrote down all of them that weren't duplicates and that's what you've got:...
awesome-appsec-interview
Awesome AppSec Interview A curated list of resources, practice questions, and study materials to help you prepare for Application Security Engineer interviews, organized by interview type. Contents Interview Overview Secure Code Review Threat Modeling Coding & Scripting Scenario-Based Interviews...
virtualenv: Builtin creation follows linked environment directories
Summary The builtin creator accepts existing directory symlinks through ensuredir and writes environment files through those directories. This permits writes outside the requested destination. Anthropic's OSS Scanner reported this as ANT-2026-MUFJEG11 in virtualenv-20261015-005, received on 15...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: iouring: A filename leak was addressed in ioopenatprep. The ioopenatprep function allocates a struct filename using getname. However, if the file is installed in the fixed file table and the OCLOEXEC flag is set, the function...
ROS-20261009-73-0281
The vulnerability of the tegrachanneltryformat function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
Experimental Measurement-Device-Independent Quantum Key Distribution with Flawed State-Preparation over 300 Km
Quantum key distribution QKD promises theoretically secure communication. However, it encounters challenges in implementation security and performance due to inevitable device imperfections. Since the proposal of measurement-device-independent MDI QKD, the critical step toward practical security ...
Path-Finding, Orbit State Preparation, and the Security of Invariant Quantum Money
The security of quantum money from knots, and of its generalization to invariant money, is based on the assumption that path-finding, exhibiting a sequence of moves between two equivalent objects, is hard. No proof of security from that assumption alone is known. The existing proofs add...
Linux kernel media preparation driver DoS
The vulnerability in the tegrachanneltryformat function within the drivers/staging/media/tegra-video/vi.c file of the Linux kernel media preparation driver is related to improper memory deallocation “memory leak”. Exploitation of this vulnerability may allow an attacker to cause a denial of servi...
CVE-2026-97545
A flaw was found in the Linux kernel's XFS file system. When an input/output I/O error occurs while writing cached data buffers to disk during b-tree preparation, the kernel fails to release an allocated buffer. A local user performing file system operations could trigger this condition to leak...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: media: cx88: A null-ptr-deref bug was fixed in the bufferprepare function. When the driver calls cx88riscbuffer to prepare the buffer, the function call may fail, resulting in an empty buffer and a null-ptr-deref later in the...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB Server versions 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 have an issue where the fixfieldsifneeded function under mysqlderivedprepare is called when the derived table is not yet prepared,...
Linux Distros Unpatched Vulnerability : CVE-2026-80897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can b...
CVE-2026-80897 netfs: release readahead folios on iterator preparation failure
In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...
CVE-2026-80897 netfs: release readahead folios on iterator preparation failure
In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...
EUVD-2026-71647
In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...
CVE-2026-80897
CVE-2026-80897 affects the Linux kernel netfs subsystem. In netfs_prepare_read_iterator(), readahead folios are batched in put_batch so that references can be dropped after the I/O iterator is prepared. If rolling_buffer_load_from_ra() fails after earlier folios have been batched, the function re...