nanoclaw

Un assistant IA qui exécute des agents de manière sécurisée dans leurs propres conteneurs. Léger, conçu pour être facilement compris et entièrement personnalisé selon vos besoins. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents dans Slack : une application par agent L'installation provisionne à...

httpd: httpd: Authentication bypass via credential replay in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

CVE-2026-73636

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

triton-cve-2025-23320

Демонстрация CVE-2025-23320 Этот репозиторий воспроизводит CVE-2025-23320, демонстрируя CWE-209, генерацию сообщения об ошибке, содержащего конфиденциальную информацию оценка CVSS: 7.5. Эта уязвимость существует на всех серверах вывода NVIDIA Triton версии 25.06 и более ранних. Эта docker-среда...

NPM: devalue: `stringify`/`uneval` serialize shared memory

NPM: devalue: stringify/uneval serialize shared memory vulnerability discovered by ? in WordPress Npm devalue versions = 5.1.0, = 5.9.2...

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC" markers present in the...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC 로컬 보안 우회 공유 메모리를 통한 프로세스 간 통신IPC은 두 개 이상의 프로세스가 공통 메모리에 접근할 수 있는 개념입니다. 통신은 이 공유 메모리를 통해 이루어지며, 한 프로세스가 변경한 내용을 다른 프로세스가 볼 수 있습니다. Apple OS X 10.9.2까지의 커널은 XNU 객체 데이터 구조에 커널 포인터를 배치하며, 이 구조는 사용자 공간에서 접근 가능합니다. 이로 인해 로컬 사용자가 객체의 지정되지 않은 속성을 읽어 ASLR 보호 메커니즘을 더 쉽게 우회할 ...

Triple_fetch

triplefetch — ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 Это эксплойт для CVE-2017-7047, логической ошибки в libxpc, которая позволяла вредоносным отправителям сообщений отправлять объекты xpcdata, основанные на разделяемой памяти. Потребители xpc-сообщений, по-видимом...

CVE-2026-92947

A flaw was found in vm2. The sandbox environment inadvertently exposes the host system's shared memory buffer pool to sandboxed code. An attacker running untrusted code inside the sandbox can access and modify these shared buffers, resulting in unauthorized information disclosure of host memory o...

CVE-2026-102820

A flaw was found in pageant. On Windows, the component fails to properly validate the response length received through shared memory when communicating with an authentication agent. A local attacker impersonating the agent can supply a manipulated length value, triggering an oversized memory...

CVE-2026-102820

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

SUSE CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

SUSE CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835

A flaw was found in kitty. This vulnerability leads to information disclosure, allowing a local attacker to capture sensitive credentials, such as passwords, entered into terminal prompts. The issue arises because the application's askpass escape sequence handler fails to verify the ownership and...

DEBIAN-CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835 Missing ownership check on the shared memory object named by the kitty askpass escape code

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...

CVE-2026-95835 Missing ownership check on the shared memory object named by the kitty askpass escape code

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...