14 matches found
nono
由打造 Sigstore 的团队构建 安全软件证明的标准，被 PyPI、npm、brew 和 Maven Central 采用 !NOTE 在迈向 1.0 版本发布的过程中，API 正在趋于稳定。必要时仍可能发生 API 变更，但会保持在最低限度。 !IMPORTANT 组织迁移： 官方 nono registry 命名空间已从 always-further 迁移到 nolabs-ai。请更新脚本、配置文件和 CI 中的所有引用。 如果您已经在旧命名空间下安装了包，请先移除，再从新的命名空间拉取： root@kitploit: nono remove...
Z-Jail
Z-Jail 用于Linux上原生代码执行的多层沙箱。 七层独立防御——无外部依赖，约73 KiB的PIE二进制文件。 root@kitploit: ┌──────────────────────────────────────────────────────┐ │ Z-Jail │ ├──────────────────────────────────────────────────────┤ │ Truthimatics PV 基于证据的裁决引擎 │ │ Namespaces mount, pid, net, ipc, uts │ │ pivotroot 加强版 chroot │ │...
CVE-2026-29646
In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...
CVE-2026-29646
OpenXiangShan NEMU is affected by CVE-2026-29646 prior to the 55295c4 commit. With RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be handled incorrectly, potentially influencing the machine-level interrupt enable (mie) state. This underm...
PT-2026-33839
In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...
CVE-2026-29646
In OpenXiangShan NEMU prior to 55295c4, when running with RVH Hypervisor extension enabled, a VS-mode guest write to the supervisor interrupt-enable CSR sie may be handled incorrectly and can influence machine-level interrupt enable state mie. This breaks privilege/virtualization isolation and ca...
SUSE CVE-2011-3054
The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
Google Discloses 20-Year-Old Unpatched Flaw Affecting All Versions of Windows
Update — With this month's patch Tuesday updates, Microsoft has finally addressed this vulnerability, tracked as CVE-2019-1162, by correcting how the Windows operating system handles calls to Advanced Local Procedure Call ALPC. A Google security researcher has just disclosed details of a...
Down the Rabbit-Hole...
Posted by Tavis Ormandy, Security Research Over-Engineer. “Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect.”1 I often find it valuable to write simple test cases confirming things work the way I think they do. Sometimes I can’t explain t...
Google Chrome Multiple Vulnerabilities (MAC OS X) - Mar 12
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmacosxmar12.nasl 5977 2017-04-19 09:02:22Z teissa $ Google Chrome Multiple Vulnerabilities MAC OS X - Mar 12 Authors: Madhuri D Copyright: Copyright c 2012...
CVE-2011-3054
The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors...
Google Chrome < 17.0.963.83 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 17.0.963.83 and is, therefore, affected by the following vulnerabilities : - An unspecified integer issue exists in libpng. CVE-2011-3045 - An error exists related to the extension web request API that could allow denial of...