nanoclaw

Un assistant IA qui exécute des agents de manière sécurisée dans leurs propres conteneurs. Léger, conçu pour être facilement compris et entièrement personnalisé selon vos besoins. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents dans Slack : une application par agent L'installation provisionne à...

CVE-2026-25291

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

EUVD-2026-92977

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

CVE-2026-25291 Use After Free in Graphics

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

CVE-2026-25291

A Use After Free vulnerability exists in Graphics components due to a lack of proper synchronization mechanisms when performing concurrent operations on shared memory page lists . This memory corruption can lead to high confidentiality, integrity, and availability impacts. No specific software ve...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipc: fixed to protect IPCS lookups using RCU. syzbot reported that it discovered a use-after-free vulnerability, 0. 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but...

httpd: httpd: Authentication bypass via credential replay in mod_auth_digest

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

CVE-2026-73636

A flaw was found in the modauthdigest module of the Apache HTTP Server. This vulnerability allows an attacker positioned on the network to bypass authentication by replaying previously intercepted user credentials. When the server is configured with a nonce a single-use security token lifetime of...

triton-cve-2025-23320

Демонстрация CVE-2025-23320 Этот репозиторий воспроизводит CVE-2025-23320, демонстрируя CWE-209, генерацию сообщения об ошибке, содержащего конфиденциальную информацию оценка CVSS: 7.5. Эта уязвимость существует на всех серверах вывода NVIDIA Triton версии 25.06 и более ранних. Эта docker-среда...

NPM: devalue: `stringify`/`uneval` serialize shared memory

NPM: devalue: stringify/uneval serialize shared memory vulnerability discovered by ? in WordPress Npm devalue versions = 5.1.0, = 5.9.2...

WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory

Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC" markers present in the...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Межпроцессное взаимодействие через разделяемую память — это концепция, при которой два или более процесса могут иметь доступ к общей памяти. Связь осуществляется через эту разделяемую память, и изменения, внесённые одним процессом, могут быть...

Triple_fetch

triplefetch — ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 Это эксплойт для CVE-2017-7047, логической ошибки в libxpc, которая позволяла вредоносным отправителям сообщений отправлять объекты xpcdata, основанные на разделяемой памяти. Потребители xpc-сообщений, по-видимом...

CVE-2026-92947

A flaw was found in vm2. The sandbox environment inadvertently exposes the host system's shared memory buffer pool to sandboxed code. An attacker running untrusted code inside the sandbox can access and modify these shared buffers, resulting in unauthorized information disclosure of host memory o...

CVE-2026-102820

A flaw was found in pageant. On Windows, the component fails to properly validate the response length received through shared memory when communicating with an authentication agent. A local attacker impersonating the agent can supply a manipulated length value, triggering an oversized memory...

CVE-2026-102820

pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to talk to a running Pageant instance. Prior to pageant 0.2.3, the Windows pageant crate's pageant/src/wmmessage.rs MemoryMap::read function trusts a peer-controlled u32 response length supplied...

PT-2026-102804

Name of the Vulnerable Software and Affected Versions pageant versions prior to 0.2.3 Description The MemoryMap::read function in the pageant/src/wmmessage.rs file trusts a peer-controlled u32 response length provided via the 8192-byte shared-memory mapping accessed by AgentClient::connect pagean...

SUSE CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

CVE-2026-98146

A flaw was found in the Linux kernel's AMD XDNA driver, which can result in a Denial of Service DoS. The driver processes command chains located in shared memory that can be concurrently modified by userspace. By altering the command counter during execution, a local attacker can cause a bounds...

SUSE CVE-2026-95835

Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtain the text typed into a prompt that kitty itself displays, because handleremoteaskpass in kitty/window.py opens the POSIX shared memory...