byvalver

byvalver ·𐑚𐑲𐑝𐑨𐑤𐑝𐑼 Shellcode 坏字节驱逐器 概述 • 快速开始 • 交互式 TUI • 针对性的坏字节消除 • 坏字节配置文件 • 功能特性 • 架构 • 系统要求 • 依赖项 • 构建 • 安装 • 用法 • 混淆策略 • 去零化策略 • 机器学习训练 • 代理集合 • 开发 • 故障排除 • 许可 目录 概述 快速开始 安装 基本用法 验证 跨架构支持 批量处理 交互式 TUI 针对性的坏字节驱逐 坏字节配置文件 功能特性 高级转换引擎 性能指标 混淆层 机器学习驱动的策略选择 输出选项 验证套件 架构 系统要求 依赖项 构建 安装 用法 混淆策略 去零化策...

Xen: Stale TLB Entry Ahead of Page Scrubbing (XSA-511)

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603

Xen hypervisor x86 PV (para-virtualized) guests can free memory pages while retaining a stale TLB entry pointing to them. Xen issues a TLB flush only when a freed page is re-used , not at the time of freeing. Because the page can be scrubbed (zeroed or reassigned) before that TLB flush occurs, a ...

CVE-2026-79603 Unconditionally do TLB flushing ahead of page scrubbing

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

EUVD-2026-72721

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

Unconditionally do TLB flushing ahead of page scrubbing

ISSUE DESCRIPTION x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify ...

Linux Distros Unpatched Vulnerability : CVE-2026-79603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used...

CVE-2026-19300

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

EUVD-2026-71271

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

CVE-2026-19300 Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

CVE-2026-19300

IBM Langflow OSS versions 1.0.0 through 1.11.2 are affected by an information disclosure vulnerability in the unauthenticated public flow endpoint. The endpoint uses a heuristic denylist to scrub stored secrets from node templates, but omits fields such as Authentication, X-Session-Id, App-Key, a...

Security Bulletin: Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows

Summary Langflow contains two authenticated information disclosure vulnerabilities. The MCP Tools component caches discovered tools in a shared process-local cache keyed only by the MCP server display name without including the user, session, flow, or resolved configuration; when two authenticate...

CVE-2026-80708 s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key import in ccaclr2cipherkey The helper function ipcprbhelper uses internal buffer memory for building and processing CPRBs. After use this buffer was never scrubbed which could lead ...

CVE-2026-73492

Loofah (Ruby, Nokogiri-based) versions 2.25.0–2.25.2 expose a vulnerability in Loofah::HTML5::Scrub.allowed_uri?, where javascript: or vbscript: URIs split by semicolon-less numeric character references (e.g., &#58, &#9, &#10, &#13) are not rejected. CGI.unescapeHTML leaves these references encod...

PYSEC-2026-920 Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

Impact When using the Django integration of the Sentry SDK in a specific configuration it is possible to leak sensitive cookies values, including the session cookie to Sentry. These sensitive cookies could then be used by someone with access to your Sentry issues to impersonate or escalate their...

CVE-2026-46283

In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfreesensitive to free auth session in tpmdevrelease tpmdevrelease uses plain kfree to free chip-auth, which contains sensitive cryptographic material including HMAC session keys, nonces, and passphrase data struct...

CVE-2026-46283 tpm: Use kfree_sensitive() to free auth session in tpm_dev_release()

In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfreesensitive to free auth session in tpmdevrelease tpmdevrelease uses plain kfree to free chip-auth, which contains sensitive cryptographic material including HMAC session keys, nonces, and passphrase data struct...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Before the commit of f33f2d4c7c80 “s390/bp: remove TIFISOLATEBP”, all entry handlers loaded r12 with the current task pointer lg %r12, LCCURRENT for use by the BPENTER/BPEXIT macros...

CVE-2026-31556

A flaw was found in the Linux kernel's XFS filesystem component. During quota scrubbing, the xchkquotaitem function could exit prematurely without releasing a critical lock. This can result in lock leaks or deadlocks in subsequent quota operations, potentially leading to system instability or a...