CVE-2019-1663-Binary-Analysis

CVE-2019-1663 のバイナリ解析 著者: Corentin Wolff 脆弱性の起源 脆弱性の原因 脆弱性は関数 0x0002BF64 に起因しており、strcpy 関数を誤って使用しているため、バッファオーバーフロー攻撃を受けやすくなっています。わかりやすくするため、この関数は Login と改名されています。以下は問題を示すコード断片です。 root@kitploit: undefined4 Loginchar param1, char param2, char param3, int param4 ... この断片では、strcpy...

d8-copy-fail-mitigation

CVE-2026-31431 に対する Deckhouse Kubernetes Platform の緩和策 言語: 英語 | Русский 脆弱性について CVE-2026-31431 は、Linux カーネルの algifaead モジュールにおける脆弱性です。このモジュールは、AFALG ソケットファミリを通じてカーネル暗号 API をユーザ空間に公開します。AEAD（認証付き暗号化と関連データ）インターフェースの欠陥により、ローカルの非特権ユーザーが細工された scattter-gather...

CVE-2022-22978

CVE-2022-22978 Spring-Security bypass Demo Spring SecurityでRegexRequestMatcherを使用し、ルールにドットを含む正規表現が含まれる場合、攻撃者は悪意のあるパケットを構築して認証をバイパスできます。 影響範囲 Spring Security 5.5.x Spring Security 5.6.x http://localhost:8080/admin/index%0a Docker docker pull s0cke3t/cve-2022-22978:latest...

sentinel-mcp

SentinelMCP — AI-Powered Cyber Defense System Google Cloud Hackathon submission — Autonomous threat detection and remediation orchestrated by Google Cloud Agent Builder Vertex AI Agent , powered by Gemini 2.0 Flash, Model Context Protocol MCP, and Dynatrace observability. The Problem Security tea...

php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD

A flaw was found in the OpenSSL extension of PHP. The AES-WRAP-PAD algorithm implementation uses the size of the plaintext length without accounting for the RFC 5649 expansion to allocate the output buffer for the AES key-wrap-with-padding operation. This may lead to an undersized memory allocati...

php: ext-pgsql: PHP: SQL injection via improper backslash escaping

A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...

Low: Red Hat Security Advisory: php security, bug fix, and enhancement update

An update for php is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

php: PHP: Denial of Service via circular symbolic links in phar archives

A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...

CVE-2019-9193

CVE-2019–9193 - PostgreSQL 9.3-12.3 認証済みリモートコード実行 概念実証 PostgreSQL データベースのバージョン 9.3 から 12.3 最新のテスト済み は、認証済みリモートコード実行の影響を受けます。 開発チームによって脆弱性そのものとはみなされていませんが、これを悪用して誤構成されたシステムへのアクセスを得ることが可能です。 ヘルプメニュー 悪用例 参考文献 NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-9193 CVE Details:...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Introducing Tiny File Manager WH1Z-Edition, the compact and efficient solution for managing your files and folders with enhanced privacy and security features. Gone are the days of relying on external resources – I've stripped down the code to its core, making it...

A week in security (August 24 – August 30)

Last week on Malwarebytes Labs: Protect your WhatsApp account with new passkey and 2FA upgrades The AI agent swarm that attacked Hugging Face is a warning for the future Flock wants privacy to meet surveillance halfway Fake listings can turn trusted platforms into scam springboards Fake Apple Pay...

sshfinder

sshfinder Find every SSH service on your network, judge whether it meets your standard, and get told when that changes. sshfinder is a single Python file with no required dependencies. Point it at a CIDR range and it discovers SSH wherever it is actually listening — not just port 22 — confirms ea...

CVE-2026-70654

A flaw was found in libvips, an image processing library. When applications process untrusted uncompressed PPM Portable Pixmap images through unusual custom libvips sources, a heap buffer overflow can occur. This vulnerability, located in the vipssourcereadtomemory function, allows a local attack...

PoC-for-Next.js-Middleware

PoC for Next.js Middleware Bypass CVE-2025-29927 This is a proof-of-concept for a fictional Next.js middleware bypass vulnerability CVE-2025-29927. Use only for educational and authorized security research. 🚀 Features Feature| Description ---|--- ✨ Color & Verbose| Color-coded output; -v for...

ratched

ratched ratched is a Man-in-the-Middle MitM proxy that specifically intercepts TLS connections. It is intended to be used in conjunction with the Linux iptabes REDIRECT target; all connections that should be intercepted can be redirected to the local ratched port. Through the SOORIGINALDST sockop...

Moderate: Red Hat Security Advisory: pipewire security update

An update for pipewire is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

pipewire: RAOP RTSP NULL Deref

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

whoami-project

Whoami - Enhanced Privacy and Anonymity for Debian and Arch-based Linux Distributions Feature Request | Report a Bug About the Project Whoami is a user-friendly privacy and anonymity tool designed for Debian and Arch-based Linux distributions. With its simple interface and ease of use, it...

CVE-2019-2890

CVE-2019-2890 WebLogic 逆シリアライズRCE脆弱性 0x01 SerializedSystemIni.dat をダウンロード /root/Oracle/Middleware/userprojects/domains/basedomain/security root@kitploit: root@159475444bab:/Oracle/Middleware/userprojects/domains/basedomain/security md5sum SerializedSystemIni.dat a50f1784f1f5b12cccb8b231d6b36223...