Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer. Since the report buffer is used by various drivers in various ways, let’s initialize it to zero during allocation, so that it cannot ever be used to leak kernel memory through special...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: Handling of integer overflows in kmallocreserve The committed change was as follows: c ptr = kmallocsize; if ptr size = ksizeptr; size = kmallocsizeroundupsize; ptr = kmallocsize; This caused various crashes, as reported ...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed a potential index out of bounds issue in the color transformation function. The issue could occur when the index ‘i’ exceeds the number of transfer function points TRANSFERFUNCPOINTS. The fix includes a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: smartpqi: Fixed a memory leak in pqireportphysluns The pqireportphysluns function fails to release the rpllist buffer when encountering an unsupported data format or when the allocation for rpl16bytewwidlist fails. These...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: gtp: Fixed a use-after-free in gtpencapdestroy. syzkaller reported a use-after-free in gtpencapdestroy. The same process freed “sk” and accessed it illegally. The commit e198987e7dd7 “gtp: fix suspicious RCU usage” added...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

CVE-2024-42919

eScan Management Console エクスプロイトタイトル : eScan Management Console - 不適切なアクセス制御 作者 : Jeyabalaji 影響を受けるバージョン : 14.0.1400.2281 テスト環境 : Windows 11 CVE : CVE-2024-42919 説明: Escan Management Consoleは認証メカニズムを実装していますが、acteScanAVReportエンドポイントは認証なしでアクセス可能です。 ペイロード : acteScanAVReport エンドポイント 再現手順 : 1. eScan...

CVE

安全研究 由 JunZ-Leo 发布的公开漏洞报告。 已发布的 CVE 报告 以下两条记录均已发布在 CVE List 中，并将 JunzLeo VulDB User 列为 报告者 。它们发布于 2025 年 4 月 28 日。 CVE| 受影响产品| 组件| 漏洞类型| 研究报告 ---|---|---|---|--- CVE-2025-4028| PHPGurukul COVID19 Testing Management System 1.0| profile.php| SQL 注入| Issue 1 CVE-2025-4030| PHPGurukul COVID19 Testing...

CVE-2026-90702

creationtimestamp| type| source ---|---|--- 2026-09-14 10:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhv5kwyg62p 2026-09-14 10:33:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fuslokhljzan...

outpost

Outpost AWS 测试与报告管理 Outpost 是一个简单工具，用于生成 AssumeRole 的 AWS 配置文件，具备验证账户是否可用的测试能力，以及 ScoutSuite 扫描结果的报告生成器。 运行 ScoutSuite 解析结果 ✨生成报告发现✨ 安装 Outpost 需要 Python3 和 boto3 才能运行。 安装依赖。 root@kitploit: virtualenv -p python3 . source bin/activate pip install -r requirements.txt python outpost.py --help 用法...

burpgpt

!IMPORTANT Announcing the launch of BurpGPT Pro, the edition specifically tailored to meet the needs of professionals and cyber boutiques. Discover a host of powerful features and a user-friendly interface that enhances your capabilities and ensures an optimal user experience. To access these...

webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

CVE-2020-1611

Juniper Junos Space 19.4R1以前におけるローカルファイルインクルードの脆弱性 CVE-2020-1611 PoC Juniper Junos Space 19.4R1以前には、ローカルファイルインクルードの脆弱性が存在します。通常のユーザー権限を持つ攻撃者がこの脆弱性を悪用できる可能性があります。 「Download Report」機能に脆弱性があります。 ベーススコア: 6.5 ベクター: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N リンク:...

POC-CVE-2026-19626

CVE-2026-19626 — 报表生成中的 RCE（已认证，非管理员） 状态：已确认 — 纯远程、非管理员、仅 REST （6.7.2-14.el9 实验室，2026-08-21）。 武器化利用链（即 poc.py 所做的工作）： 1. 以任意普通组织用户身份登录 2. POST /rest/group，使用 name: "=system''" — 花括号/引号会被原样接受 （group 控制器没有字符集检查） 3. POST /rest/reportDefinition — PDF 报表，一个 pieChart 组件， user/sumgroup 查询，labelColumns:...

CVE-2026-90620

creationtimestamp| type| source ---|---|--- 2026-09-14 04:06:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2bvtg3vp3i26f...

CVE-2026-14962

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:13+00:00| seen| Telegram/cfwIjD0BfTttpxj-RZnmg61xri6aKpaW-Ttu0tih2neg1Gg 2026-09-14 03:00:13+00:00| seen| Telegram/SISeOiJWiDHPKa0-EGjfIE-tIZnqvMDmbIqcTRDP3O63UA 2026-09-15 00:00:22+00:00| published-proof-of-concept|...

CVE-2026-86547

creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY 2026-09-15 00:00:23+00:00| seen| Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY...

UBUNTU-CVE-2026-89620

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in quickspiallocreportbuf to the device-descriptor derived maxreportlen a fe...

CVE-2026-89620

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quickspi: validate report size before copy writecmdtotxdma builds an output report in qsdev-reportbuf, a heap buffer allocated in quickspiallocreportbuf to the device-descriptor derived maxreportlen a fe...

CVE-2026-89622

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes mcpi2csmbusread stores the caller-supplied buffer pointer in mcp-rxbuf for the duration of a transfer but never clears it when the transfer finishes or times out. Once...