nanoclaw

エージェントを専用コンテナで安全に実行するAIアシスタント。軽量で、理解しやすく、あなたのニーズに完全にカスタマイズできるように設計されています。 nanoclaw.dev • ドキュメント • English • 中文 • 한국어 • • NanoClawを作った理由...

httpd: httpd: Authentication bypass via credential replay in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

CVE-2026-73636

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

triton-cve-2025-23320

CVE-2025-23320の実証 このリポジトリはCVE-2025-23320を再現し、CWE-209（機密情報を含むエラーメッセージの生成）を実証します（CVSSスコア: 7.5）。この脆弱性は、NVIDIA Triton推論サーバー25.06以前のすべてのバージョンに存在します。 このDockerセットアップは、NVIDIA Triton推論サーバーと攻撃クライアントを含むネットワークを実行します。この環境はクライアントがLinux上で実行されることも保証するため、CVEはすべてのオペレーティングシステムで再現可能です。 ビルド/実行方法 docker compose...

NPM: devalue: `stringify`/`uneval` serialize shared memory

NPM: devalue: stringify/uneval serialize shared memory vulnerability discovered by ? in WordPress Npm devalue versions = 5.1.0, = 5.9.2...

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC" markers present in the...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC ローカルセキュリティバイパス 共有メモリを介したプロセス間通信（IPC）は、2つ以上のプロセスが共通のメモリにアクセスできるという概念です。通信はこの共有メモリを介して行われ、あるプロセスによる変更が別のプロセスからも参照可能になります。 Apple OS X 10.9.2以前のカーネルは、ユーザースペースからアクセス可能なXNUオブジェクトのデータ構造にカーネルポインタを配置します。そのため、ローカルユーザーがオブジェクトの不特定の属性を読み取ることでASLR保護メカニズムをバイパスしやすくなります。 詳細...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 これは CVE-2017-7047 のエクスプロイトです。libxpc の論理エラーにより、 悪意のあるメッセージ送信者が共有メモリに支えられた xpcdata オブジェクトを送信できました。 xpc メッセージの消費者は、xpcdata オブジェクトのバッキングバッファが 受信側で処理されている間に送信者によって変更され得ることを想定していないようでした。 このプロジェクトは CVE-2017-7047 を利用して、i...

CVE-2026-92947

A flaw was found in vm2. The sandbox environment inadvertently exposes the host system's shared memory buffer pool to sandboxed code. An attacker running untrusted code inside the sandbox can access and modify these shared buffers, resulting in unauthorized information disclosure of host memory o...

CVE-2026-102820

A flaw was found in pageant. On Windows, the component fails to properly validate the response length received through shared memory when communicating with an authentication agent. A local attacker impersonating the agent can supply a manipulated length value, triggering an oversized memory...

CVE-2026-102820

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

SUSE CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

SUSE CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835

A flaw was found in kitty. This vulnerability leads to information disclosure, allowing a local attacker to capture sensitive credentials, such as passwords, entered into terminal prompts. The issue arises because the application's askpass escape sequence handler fails to verify the ownership and...

DEBIAN-CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835 Missing ownership check on the shared memory object named by the kitty askpass escape code

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835 Missing ownership check on the shared memory object named by the kitty askpass escape code

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...