CVE-2025-69219

CVE-2025-69219 — Apache Airflow Providers HTTP 通过不安全的 Pickle 反序列化实现 RCE 严重性: 高 CVSS 3.1: 8.8 向量: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-913 — 对动态管理代码资源的不当控制 受影响版本: apache-airflow-providers-http = 5.1.0, 修复版本: apache-airflow-providers-http == 6.0.0 补丁: apache/airflow61662 · commit 97839f7 概述...

powerfulseal

PowerfulSeal PowerfulSeal 向您的 Kubernetes 集群注入故障，以便您尽早发现问题。它允许编写描述完整混沌实验的场景。 拥抱不可避免的失败。 拥抱海豹 。 文档 请参阅 PowerfulSeal 文档 了解如何使用它。 亮点 支持 Kubernetes、OpenStack、AWS、Azure、GCP 和本地机器 使用 yaml 策略 描述完整的混沌实验 Prometheus 和 Datadog 指标收集 针对不同用例提供多种模式 你好，世界！ 为了让您尝个鲜，这里有一个示例策略。它会杀死一个 pod，然后检查服务是否继续响应 HTTP 探针，以验证其在某个...

Abused-Legitimate-Services

被滥用的合法服务 合法的第三方平台即服务（PaaS）提供商正越来越多地被威胁行为者利用来开展钓鱼攻击和恶意软件部署。诸如云实例、营销平台、内容分发网络（CDN）和动态 DNS 服务器等 PaaS 提供商已被武器化，用于一系列恶意活动。其中一个关键优势是，它们可用于规避检测系统。这是因为这些服务被预先屏蔽的可能性较低，因为其具有已建立的信任级别和合法使用背景。 博客中的详细分析请见：https://blog.bushidotoken.net/2021/11/leveraging-legitimate-services-for.html 恶意软件活动滥用的合法服务 钓鱼活动滥用的合法服务...

pentestcode

PentestCode 终端中的 AI 渗透测试代理。 多代理架构 • 渗透任务状态跟踪 • 20+ LLM 提供商 PentestCode 是运行在终端中的自主渗透测试代理。 把它指向目标，它就会运行工具、读取输出、更新对网络的认知，并决定下一步行动——就像操作员那样。它是 OpenCode（MIT）的硬分叉，剥离了代码编辑的定位，专为攻击性安全重建。 Beta — 它在真实渗透任务和 CTF 中表现稳定，但可能会有粗糙之处。遇到问题时请提交 issue；正是这些反馈让它变得更好。 它能做什么 输入一条指令，输出完整攻击链： root@kitploit: you: "pentest...

burp-vps-proxy

Burp VPS Proxy：为 Burp Suite 轻松配置云代理 快速入门 » 功能 · 提供商 · 免责声明 📖 关于 Burp VPS Proxy 是一个 Burp Suite 扩展，允许在 Burp Suite 中自动在主流云提供商上创建和删除上游 SOCKS5 代理。它会自动配置 Burp 使用所创建的代理，从而使所有出站流量都来自云 IP 地址。这有助于防止我们在进行渗透测试和漏洞赏金狩猎时，主 IP 地址被主流 WAF 拉黑。 Burp VPS Proxy 的灵感来自 @honoki 出色的 DigitalOcean Droplet Proxy for Burp Sui...

cloud_ip_ranges

Cloud IP Ranges Description Most cloud providers publish up to date lists of their IP address ranges. This tools identifies if an IP belongs to a provider's ranges by fetching and parsing the latest lists. Supports: AWS source Azure source Google Cloud Platform source Alibaba Cloud currently...

CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

CVE-2026-69814

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69790

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69729

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

EUVD-2026-73597

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

CVE-2026-69814

CVE-2026-69814 is a use-after-free vulnerability in Windows Credential Providers that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, and low privileges required, resulting in high impact to conf...

CVE-2026-69729

CVE-2026-69729 is a heap-based buffer overflow in Windows Credential Providers that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction , with an attack complexity of low and network attack vector, as sco...

EUVD-2026-73040

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

CVE-2026-69790

CVE-2026-69790 is a heap-based buffer overflow in Windows Credential Providers that enables a local, low-privilege attacker to escalate privileges. The vulnerability requires local access with low privileges , no user interaction , and has low attack complexity , resulting in HIGH impact across c...

EUVD-2026-73035

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

Windows Credential Providers Elevation of Privilege Vulnerability

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

Windows Credential Providers Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

Windows Credential Providers Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...