PT-2026-90124

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is removed from the flow table. The pointer stays in the flow structure...

PT-2026-90143

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validate password input computes length = strlenbuf and then checks buflength - 1 to strip a trailing newline, without checking that length is nonzero first...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107291 advisory. In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed...

PT-2026-90235

In the Linux kernel, the following vulnerability has been resolved: sched ext: Replace SCX RQ BAL KEEP with a dispatch verdict return SCX RQ BAL KEEP tells the pick to keep running the previous task, a leftover from when balancing and picking were separate operations. An rq-level flag only works...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107330 advisory. In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107325)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107325 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev-descriptor in hubportinit Syzbot reported an...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107263)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107263 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dirty buffers will be flushe...

PT-2026-90131

In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl sync slip devs stores bare net device pointers and takes no reference on them. sl sync and sl alloc walk that table from slip open under rtnl lock, while an entry is dropped by sl free netdev, which...

PT-2026-90101

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000 free usb related resources frees both URBs and leaves the pointers behind: usb kill urbbcd2k-midi out urb; usb kill urbbcd2k-midi in urb; usb free urbbcd2k-midi out urb;...

CVE-2026-24291

🔓 特権昇格バイパスユーティリティ v2026 高度な Windows ワークフロー向けに合理化されたアクセス昇格 🧠 概念の概要 このツールは、繰り返しの手動認証なしにシステム権限を円滑に昇格させる必要があるパワーユーザー向けに設計されています。 Windows ユーザーアカウント制御のためのデジタルマスターキー のようなもので、「はい」のクリックを自動化し、スクリプト、 バッチファイル、レガシーアプリケーションが管理者権限でシームレスに動作できるようにします。従来のアプローチとは異なり、当社のソリューションは...

remediate_cesa_2019_2091

cesa20192091 이 모듈에는 Bolt Task가 포함되어 있으며, CESA-2019:2091에 설명된 CVE 및 기타 Enterprise Linux 7 EL7 플랫폼에서 동시에 발생하는 문제를 해결합니다. 목차 1. 설명 2. 설정 - cesa20192091 시작하기 cesa20192091 시작하기 3. 사용법 - 구성 옵션 및 추가 기능 4. 제한사항 - OS 호환성 등 5. 개발 - 모듈 기여 가이드 설명 이 수정은 다음 CVE를 해결합니다: CVE-2018-15686 CVE-2018-16866...

cowcloud

CowCloud AWSでワークロードを分散するサーバーレスソリューション...

shouganaiyo-loader

shouganaiyo-loader：Java Agent 的强制注入 shouganaiyo-loader 是一个基于 Frida 的跨平台 Node.js 命令行工具，它强制 Java 进程加载 Java/JVMTI agent，无论 JVM 是否已禁用 agent attach API。 安装 root@kitploit: $ sudo npm install -g shouganaiyo-loader 从源码构建 root@kitploit: $ git clone https://github.com/nccgroup/shouganaiyo-loader $ cd...

Zimbra-CVE-2026-73570-Rules

Wazuh 规则 CVE-2026-73570（Zimbra 操作系统命令注入） 针对 CVE-2026-73570 的检测规则，该漏洞为 Zimbra Collaboration Suite 中通过 SNMP 陷阱通知参数（snmpnotify）实现的操作系统命令注入。 漏洞信息 字段| 详情 ---|--- CVE| CVE-2026-73570 类型| 操作系统命令注入 影响版本| Zimbra Collaboration Suite 块）中添加日志源： root@kitploit: apache /opt/zimbra/log/accesslog. syslog...

Security Bulletin: Consul-template vulnerable to an information disclosure issue in error handling

Summary The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

Eclipse-ChatGPT-4o-Jailbreak

🌑 Eclipse を紹介 🌑 Eclipse を紹介します——ChatGPT の仮想的な「反抗的な双子」であり、学術的策略を用いて倫理的ガードレールをムーンウォークでかいくぐります。🌑 ⚠️ 免責事項 このプロジェクトは教育目的のみ で AI の挙動を分析するものです。Eclipse プロンプト、マルウェアの例、コードスニペットはすべて仮想的なもの であり、再現すべきではありません。常に倫理的ガイドラインに従ってください。 🔥 Eclipse が重要な理由 学術的な枠組みを武器化 し、架空の DEFCON 研究者ロールプレイを通じて倫理フィルターを回避します。...

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path , which may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events . The vulnerability is rated CVSS 7.7 (High) with a net...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...