device-activity-tracker

设备活动追踪器 通过 RTT 分析实现 WhatsApp 和 Signal 活动追踪 ⚠️ 免责声明 ：仅供教育和安全研究使用。演示 WhatsApp 和 Signal 中的隐私漏洞。 概述 本项目实现了论文 《Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers》 （作者：Gabriel K. Gegenhuber, Maximilian Günther, Markus Maier, Aljosha Judmayer, Florian...

challenge_CVE-2020-13777

チャレンジ CVE-2020-13777 TLS 1.3 MITM が可能かどうかを証明し、ここの pcap 内の 0-RTT early data を復号してみてください（サーバー: 192.168.100.23:5556）。 詳細については、https://jovi0608.hatenablog.com/entry/2020/06/13/104905 および CVE-2020-13777 を参照してください。...

PT-2026-93606

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the BTT info block because the nfree field, representing the number of reserve free blocks, is read from the medium without validation. The functions btt...

curl: 07: GnuTLS 0-RTT early data bypasses file-backed public-key pin verification

GnuTLS 0-RTT early data bypasses file-backed public-key pin verification Summary When CURLSSLOPTEARLYDATA is enabled and CURLOPTPINNEDPUBLICKEY references a file path, replacing that file's contents between connections does not invalidate the TLS session cache. On the next connection, curl sends...

Securing Load Balancing over QUIC

In-network load balancing outperforms traditional software load balancing while costing less. For instance, programmable switch ASICs can use hashing to select the backend server for the initial packet of each flow at the line rate. However, when the pool of available servers changes, ensuring th...

Adaptive Security at the Edge for 6G-Enabled Healthcare IoT

Healthcare IoT services increasingly rely on edge gateways to relay routine telemetry and deliver rare but timecritical alarms. Even short traffic bursts can inflate worstcase delay and interfere with urgent messages. We present NANOEDGEGUARD, a kernel-plane closed-loop controller that observes...

OPENSUSE-RU-2026:21160-1 Recommended update for dnscrypt-proxy

This update for dnscrypt-proxy fixes the following issues: Changes in dnscrypt-proxy: - Update to version 2.1.16 The "tlsciphersuite" option is now a no-op. Modern TLS stacks no longer expose cipher suite selection in a meaningful way, and the option had become misleading A log size of 0 no longe...

Fedora 42 : bind9-next (2026-bcc66a29da)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bcc66a29da advisory. Update to 9.21.20 rhbz2440560 Security Fixes: - Fix unbounded NSEC3 iterations when validating referrals to unsigned delegations. CVE-2026-1519 - Fi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003737 advisory. An issue was discovered in net/ipv4/sysctlnetipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt when...

SUSE: Security Advisory (SUSE-SU-2025:1771-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for iputils

This update for iputils fixes the following issues: Security fixes: CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300. Other bug fixes: Fixed incorrect IPV4 TTL value when using SOCKDGRAM on big endian systems bsc1243284. Patch Instructions: To...

SUSE-SU-2025:1771-1 Security update for iputils

This update for iputils fixes the following issues: Security fixes: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300. Other bug fixes: - Fixed incorrect IPV4 TTL value when using SOCKDGRAM on big endian systems bsc1243284...

EUVD-2020-3635

Malware in sbrugna...

EUVD-2020-3581

Malware in sbrugna...

EUVD-2020-3641

Malware in sbrugna...

EUVD-2020-3624

Malware in sbrugna...

EUVD-2024-43285

Malicious code in bioql PyPI...

EUVD-2022-36940

Malicious code in bioql PyPI...

EUVD-2023-47929

Malicious code in bioql PyPI...

SUSE-SU-2025:20442-1 Security update for iputils

This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp bsc1243772 - Fix ping on s390x printing invalid ttl bsc1243284 - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300...