PT-2026-107269

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.4.20 Description The @backstage/plugin-auth-backend-module-oidc-provider package contains improper authentication within the OIDC provider. In deployments utilizing OIDC email-based identity resolution with a...

CVE-2026-106274: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106856

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect reference resolution in DevTools allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...

CVE-2026-106488: Improper Authentication

Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution with a provider that permits unverifi...

CVE-2026-106230: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Stable Channel Update for Desktop

The Stable channel has been updated to 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

vm2: NodeVM custom resolution bypasses external path boundaries

Summary At source revision 91034466bfb7f56b95fd48083ec6ca36d058f164 of vm2 3.11.8, an untrusted NodeVM guest can turn one allowlisted custom-resolved module into authorization for a separate file whose path merely shares the resolved path's string prefix. LegacyResolver.customResolve stores the...

Astra Linux – Vulnerability in Firefox and Thunderbird

When resolving a symbolic link such as file:///proc/self/fd/1, an error message may be generated if the symbolic link resolves to a string containing uninitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operating systems Android, Linux, MacOS. Windows is unaffected...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Buffer size aligned upwards. The hardware can support any image size WxH, with arbitrary W image width and H image height dimensions. The buffer size is aligned upwards for both the encoder and the decoder. The...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed path resolution in ksmbdvfskernpathcreate. The SMB2 open lookup is rooted at the share using LOOKUPBENEATH, but the create/mkdir/hardlink logic does not use this approach. ksmbdvfskernpathcreate generates an...

CVE-2025-24054

Divulgation de hachage NTLMv2-SSP sans clic dans l'Explorateur Windows 🎥 Démonstration POC + Contournement du correctif de mars 2025 🎥 Contournement du correctif Cliquez sur l'image ci-dessus pour regarder la démonstration de la vulnérabilité 📋 Aperçu technique Ce dépôt fournit un cadre de...

domains-from-csp

domains-from-csp CSP 헤더에서 도메인 이름을 파싱하는 Python 스크립트 Content Security PolicyCSP 헤더에서 도메인 이름을 추출하는 스크립트 현재 출력은 stdout으로 출력됩니다 데모 스크린샷 서드파티 패키지 의존성 requests click 설치 이 저장소를 클론하세요 $ git clone [email protected]:yamakira/censys-enumeration.git 의존성을 설치하세요 $ pipenv install 도움말 메뉴를 확인하세요 $ python...

CVE-2025-55184_Testing

CVE-2025-55184Тестирование Python-скрипт для тестирования CVE-2025-55184 CVE-2025-55184 – Сканер DoS для React Server Components Безопасный скрипт проверки безопасности , предназначенный для обнаружения CVE-2025-55184 , уязвимости типа «отказ в обслуживании» DoS, затрагивающей React Server...

Nim_DInvoke

Nim DInvoke Реализация D/Invoke на Nim Все Nim-бинары обычно экспортируют одни и те же 58–60 функций Windows API: Все остальные функции Windows API обычно разрешаются во время выполнения через GetProcAddress и LoadLibraryA, как упоминается в OffensiveNim или этой записи в блоге. Таким образом,...

VBA-macro-experiments

Эксперименты с VBA-макросами Коллекция VBA-макросов, опубликованных в нашем Twitter / блоге. Если вам интересна эта тема, прочитайте наши статьи «Хакерство в эпистолярном стиле: реализация kerberoast на чистом VBA» и «Проливаем свет на создание VBA-макросов». Также не стесняйтесь подписаться на н...

CVE-2020-8277

CVE-2020-8277 Только для образовательных целей. Быстрый запуск clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you u...

Fedora 44 : wordpress (2026-7f9c69a63c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7f9c69a63c advisory. WordPress 6.9.9 Security Release Security updates included in this release - Unauthenticated path traversal in page-template resolution leading to conditiona...

CVE-2026-94483

A flaw was found in Next.js Image Optimization, which can lead to information disclosure via Server-Side Request Forgery SSRF. In configurations where remote image optimization is enabled with host allowlists, the application can follow attacker-controlled Domain Name System DNS resolution after...

CVE-2026-94483

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach private IP addresses after the URL...