fire-hd-ownership

fire-hd-ownership 真正拥有我早已买下的平板。 2022 年 11 月，我在 eBay 上以 114.26 美元买了一台 Fire HD 10（第 11 代，2021 款），打算用作 Home Assistant 信息亭。它平稳运行了几年，然后开始自动关机。日志说明了原因：是亚马逊自家的软件发出了关机指令，而肇事的软件包受到保护，设备所有者无法触碰。唯一的永久修复是获取 root 权限——而此前从未有人在这款硬件上成功过。 五个月后，经过四款 AI 模型的接力协作，以及 266.15 美元的 API 账单和订阅费用，这台平板终于归我所有：root shell、SELinu...

EUVD-2026-57243

A repository publisher without delete permission may modify protected package content under specific conditions...

CVE-2026-14235

The Download Manager WordPress plugin before 3.3.62 does not bind its temporary download token to the requesting session nor expire it promptly, making the token a long-lived, multi-use, portable bearer token, so that an attacker who obtains one leaked download key can repeatedly download a role-...

CVE-2026-5952

GitLab CE/EE vulnerability CVE-2026-5952 affected all versions prior to 18.11.6 (from 17.11), 19.0 prior to 19.0.3, and 19.1 prior to 19.1.1. An authenticated user with developer-role permissions could bypass package protection rules and overwrite protected Maven package metadata due to incorrect...

CVE-2026-1747

Removed by vendor...

CVE-2026-1747 Authentication Bypass Using an Alternate Path or Channel in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packag...

PT-2026-21997

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.11 through 18.7.4 GitLab EE versions 18.8 through 18.8.4 GitLab EE versions 18.9 through 18.9.0 Description A flaw existed in GitLab EE that, under specific circumstances, could have allowed Developer-role users with...