CVE-2023-36427

CVE-2023-36427 本仓库包含 CVE-2023-36427 的报告与漏洞利用，该漏洞是 Windows 上来自根分区的任意物理地址内存破坏。漏洞的详细信息与利用代码已包含在发送给 Microsoft 的 报告 中。 时间线 7 月 2 日 - 将报告发送给我在 Microsoft 的一位朋友。 7 月 11 日 - 收到负责该问题的团队成员的回复。 8 月 8 日 - 收到将披露日期定为 11 月 14 日的提议。 8 月 9 日 - 同意该提议。 11 月 14 日 - 修复已发布。 11 月 15 日 - 公开该问题。收到通知，该问题符合 2000 美元赏金奖励条件。 感...

CVE-2024-21305

CVE-2024-21305 此仓库包含 CVE-2024-21305 的报告和 PoC，即 Hypervisor-Protected Code Integrity HVCI 的非安全配置漏洞。该漏洞允许在根分区内执行任意内核模式代码，从而有效绕过 HVCI。有关根本原因，请阅读与 Andrea Allievi @aall86 共同撰写的博客文章，他是分析并修复该问题的 Windows Core OS 工程师。 此仓库中的报告是我发送给 MSRC 的内容，其中包含 PoC 和对该问题的初步分析。 时间线 7月2日，Satoshi 就漏洞的有效性咨询了 Andrea。...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ansible (UTSA-2026-017472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017472 advisory. A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower befo...

IncusOS 安全漏洞

IncusOS is an immutable operating system image developed for container management platforms, based on the LXC open source framework. Previous versions of IncusOS 202603142010 contained security vulnerabilities. These vulnerabilities stemmed from a default configuration that allowed physical acces...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to insufficient policy enforcement in the Trusted Platform Module TPM during the disk decryption process. An attacker can gain unauthorized access to encrypted data by physically replacing the ro...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to insufficient policy enforcement in the Trusted Platform Module TPM during the disk decryption process. An attacker can gain unauthorized access to encrypted data by physically replacing the ro...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to insufficient policy enforcement in the Trusted Platform Module TPM during the disk decryption process. An attacker can gain unauthorized access to encrypted data by physically replacing the ro...

IncusOS has a LUKS encryption bypass due to insufficient TPM policy

The default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data without requiring any interaction by the system's owner or any tampering of Secure Boot state or kernel UKI boot image. That's...

dracut bug fix and enhancement update

The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition...

XenServer Syslog Rotation and Tuning

Disk space on XenServer's root partition is almost at or is at capacity perdf -h There are numerous compressed "gz" files in /var/log/ from Syslog rotation...

Serv-U FTP Server - Jail Break

I m better than TESO! CONFIDENTIAL SOURCE MATERIALS! ---------------------------------------------------- Serv-U FTP Server Jail Break 0day Discovered By Kingcope Year 2011 ---------------------------------------------------- Affected: 220 Serv-U FTP Server v7.3 ready... 220 Serv-U FTP Server v7....

Local DoS : RedHat 6.0

Hello, I'm not sure if this problem has ever been addressed or not, but considering that I just spent a day recovering from a corrupted root partition and this can be done by any user with window manager access, I thought this might be worth mentioning anyway. While killing yet another zombie...