1441554 matches found
DEBIAN-CVE-2026-80761
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname isosockgetname fills a struct sockaddriso in place and returns its size without clearing it first, so bytes it does not write are copied to user space from the kern...
DEBIAN-CVE-2026-80762
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...
DEBIAN-CVE-2026-80765
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...
DEBIAN-CVE-2026-80759
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciaml: validate firmware segment lengths amldownloadfirmware reads two lengths from the firmware header and uses them to build pointers before checking that the header and segment data are present. A truncated or...
DEBIAN-CVE-2026-80758
In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables preemption again before returning. If that put drops the final...
bx2-writeups
安全文章 我的网络安全文章合集，涵盖： TryHackMe Hack The Box Linux 权限提升 AI 与基础设施安全 CTF 安全挑战 作者：Nanashi Bx2...
CVE-2026-85696
creationtimestamp| type| source ---|---|--- 2026-09-04 16:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupdjylwg62e 2026-09-04 16:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mupdy66dlr2v 2026-09-04 16:30:14+00:00| seen|...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.9-0.6.hum1 aarch64, x8664 grafana12.4-12.4.9-0.6.hum1.src src Security Fixes: grafana12.4: CVE-2026-84292 CVE-2026-84394...
revera
Revera npm 包的信用评分。 Revera 帮助你在运行 npm install 之前判断某个包是否值得安装。它分析包质量、维护状况、安全性、生态健康度和发布者可信度——现在还能在整个依赖图中传递风险——并生成一份可解释的贝叶斯信誉报告。 演示 实时查看 revera 检查并解释包。 快速开始 无需安装即可立即运行 revera： root@kitploit: npx revera check react 示例 检查像 request（已于 2020 年弃用）这样的包时，会立即给出具体原因警告你： root@kitploit: $ revera why request...
bordair-detector
Bordair Detector Un detector de dos etapas para intentos de inyección de prompts y jailbreak en entradas de LLM. Una puerta de regex resuelve la gran mayoría del tráfico sin tocar el modelo; cualquier cosa ambigua pasa a un clasificador DeBERTa-v3 cuantizado que se ejecuta en ONNX. El mismo motor...
CVE-2022-40684
Este repositorio no tiene un README...
SecureCivic
SecureCivic SecureCivic 是一个由公民构建的开源身份验证平台，旨在帮助美国社会保障局（SSA）采用现代化、隐私至上的验证系统。它通过提供安全、实时的身份验证（具备强大的密码学保护、欺诈检测和公民自主控制的身份安全工具），摆脱对私人数据经纪商和中间商的依赖。 SecureCivic 的设计目标是完全透明、可审计，并通过 AGPL-3.0+ 许可证下的开源协作持续改进。 愿景 创建一个公共数字信任层，使身份验证具备以下特性： 归公众所有 由公民掌控 以现代密码学技术保护 摆脱对私人数据经纪商的依赖 通过开源开发实现透明与可审计 核心概念 SecureCivic...
CVE-2022-1015
ムンムンイはバカ...
Orbit Tracer
Orbit Tracer Orbit Tracer 安全代理，实现智能安全修复 利用 AI 和 Orbit 的知识图谱，自动化整个代码库的安全漏洞分析、风险评估与修复 问题 安全团队面临一个严峻挑战：发现漏洞很快，修复却耗时漫长。 root@kitploit: 手动漏洞修复流程： 1. SAST 扫描发现漏洞 5 分钟 2. 安全工程师分析影响 2 小时 3. 开发者创建修复 1 小时 4. 代码审查与批准 30 分钟 5. 合并与部署 30 分钟 总计：每个漏洞 4 小时以上 面对成百上千的发现结果和多个代码库，团队深陷手工操作，安全风险不断累积。 解决方案 Orbit Tracer...
CVE-2026-85693
Chatbot UI (open-source chat application) contains an authorization bypass in its retrieval endpoint (/api/retrieval/retrieve). The root cause is a service-role Supabase client that bypasses row-level security and fails to validate file ownership, allowing any authenticated user to retrieve index...
EUVD-2026-71142
Chatbot UI contains an authorization bypass vulnerability in the retrieval endpoint that allows authenticated attackers to access private file content belonging to other users by supplying arbitrary file UUIDs. The endpoint uses a service-role Supabase client that bypasses row-level security and...
MINI-72J6-9X3G-9RWQ
Bulletin has no description...