domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

Hashcat-Cheatsheet

Шпаргалка по Hashcat Шпаргалка по Hashcat для OSCP https://hashcat.net/wiki/doku.php?id=hashcat Определение хэшей hash-identifier Примеры хэшей: https://hashcat.net/wiki/doku.php?id=examplehashes Максимальная мощность! Я обнаружил, что можно выжать ещё немного мощности из подбора хэшей, добавив э...

Notes

Инженерия безопасности в Google: мои заметки для подготовки к собеседованию Автор: nolang Я инженер по безопасности в Google, и это заметки, которые я составил, когда готовился к собеседованиям. Это моя первая работа в сфере безопасности, и многие спрашивали меня, как я готовился. Мои заметки в...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

awesome-appsec-interview

Awesome AppSec Interview 애플리케이션 보안 엔지니어 면접 준비를 위한 리소스, 연습 문제, 학습 자료를 인터뷰 유형별로 정리한 큐레이션 목록입니다. 목차 인터뷰 개요 안전한 코드 리뷰 위협 모델링 코딩 및 스크립팅 시나리오 기반 인터뷰 기술 지식 시스템 설계 행동 인터뷰 STAR 관련 리소스 기여하기 라이선스 인터뷰 개요 예상되는 내용 대부분의 AppSec 인터뷰 프로세스는 다음과 같은 요소를 포함합니다: 안전한 코드 리뷰 Secure Code Review 위협 모델링 Threat Modeling 코딩 또는...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iouring: A filename leak was addressed in ioopenatprep. The ioopenatprep function allocates a struct filename using getname. However, if the file is installed in the fixed file table and the OCLOEXEC flag is set, the function...

Security_Engineer_Interview_Questions

SecurityEngineerInterviewQuestions Весной 2016 года я провёл пару часов, просматривая Glassdoor.com, чтобы узнать, какие вопросы по безопасности пользователи указывали на собеседованиях на должность инженера по безопасности. Я записал все вопросы, которые не были дубликатами, и вот что у вас есть...

Path-Finding, Orbit State Preparation, and the Security of Invariant Quantum Money

The security of quantum money from knots, and of its generalization to invariant money, is based on the assumption that path-finding, exhibiting a sequence of moves between two equivalent objects, is hard. No proof of security from that assumption alone is known. The existing proofs add...

The vulnerability of the __tegra_channel_try_format() function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver allows a hacker to cause a service failure.

The vulnerability of the tegrachanneltryformat function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-97545

A flaw was found in the Linux kernel's XFS file system. When an input/output I/O error occurs while writing cached data buffers to disk during b-tree preparation, the kernel fails to release an allocated buffer. A local user performing file system operations could trigger this condition to leak...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: media: cx88: A null-ptr-deref bug was fixed in the bufferprepare function. When the driver calls cx88riscbuffer to prepare the buffer, the function call may fail, resulting in an empty buffer and a null-ptr-deref later in the...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB Server versions 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11 before 10.11.7, 11.0 before 11.0.5, and 11.1 before 11.1.4 have an issue where the fixfieldsifneeded function under mysqlderivedprepare is called when the derived table is not yet prepared,...

Linux Distros Unpatched Vulnerability : CVE-2026-80897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can b...

CVE-2026-80897 netfs: release readahead folios on iterator preparation failure

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

CVE-2026-80897 netfs: release readahead folios on iterator preparation failure

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

EUVD-2026-71647

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

CVE-2026-80897

CVE-2026-80897 affects the Linux kernel netfs subsystem. In netfs_prepare_read_iterator(), readahead folios are batched in put_batch so that references can be dropped after the I/O iterator is prepared. If rolling_buffer_load_from_ra() fails after earlier folios have been batched, the function re...

CVE-2026-80897

In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator preparation failure netfspreparereaditerator batches readahead folios in putbatch so that the folio references can be dropped after the I/O iterator has been prepared. If...

Eavesdropper-Blind Remote State Preparation and Applications to Quantum Public-Key Encryption

Remote state preparation RSP is a central primitive in quantum cryptography, enabling classical parties to remotely construct quantum states using only classical communication. As a result, RSP serves as a key building block in numerous protocols involving classical clients and quantum servers,...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...