DevSecOpsGuideline

OWASP DevSecOps 指南 OWASP DevSecOps 指南介绍了如何实现安全流水线、运用最佳实践，并引入可在此方面使用的工具。此外，该项目还致力于帮助我们在开发流程中推广“左移安全”文化。 本项目适用于任何拥有开发流水线（换言之，即 DevOps 流水线）的各种规模的公司。 我们力求在此项目中勾勒出安全 DevOps 流水线的整体视图，然后根据我们定制化的需求加以改进。 理想目标是“尽早发现安全问题（无论是设计缺陷还是应用漏洞）。” 初始步骤 DevSecOps 的核心就是将安全融入 DevOps。但要跟上 CI/CD 的节奏，安全必须尽早注入软件编写与测试环节。 OWA...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

bitcoder-v2-research

BitCoder-v2 研究 组织： Bytepro AI 状态： 活跃研究 — 私有仓库 目标： arXiv Q3 2026 + ARC Prize 论文赛道 Nov 2026 研究目标 实证记录在数学推理（SAIR，arXiv:2504.18897）中观察到的单次提示上限在代码安全漏洞检测中复现， 从而证实路由假设是领域无关的。 论文主张 gpt-oss-20b + 结构化速查表在合成分布（Juliet、OWASP Benchmark）上可媲美前沿模型， 但在分布偏移到真实世界数据（CVEfixes、VUDENC）时崩溃， 记录了 LLM 在代码安全任务上的泛化上限。 漏洞类别 类别...

Linux Distros Unpatched Vulnerability : CVE-2026-89568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '...

CVE-2026-89568

A flaw was found in the Linux kernel. The khopreservedmemoryreserve function, responsible for reserving memory, incorrectly calculates the size of these reservations. This issue arises because it uses a 32-bit integer for bit shifting, which limits the maximum reservation size to 2 Gigabytes GiB...

CVE-2026-89568

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

DEBIAN-CVE-2026-89557

In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocksset by the following sequence, 1930 rdev-badblocks.shif...

CVE-2026-89568

In the Linux kernel , the function kho_preserved_memory_reserve() contains a size-calculation bug. It computes the size of a memory preservation using 1 <

CVE-2026-89568 kho: fix size calculation in kho_preserved_memory_reserve()

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

EUVD-2026-76479

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...

CVE-2017-8759

CVE-2017-8759 这只是我对CVE-2017-8759的移植 代码已转移到另一个父仓库。重定向？...

PT-2026-90284

In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in kho preserved memory reserve kho preserved memory reserve calculates the size of a preservation by doing 1 order + PAGE SHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is,...

PT-2026-90273

In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblog shift in super 1 load In super 1 load, sb-bblog shift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocks set by the following sequence, 1930...

cve-2026-64725-poc

仓库里有什么？ 这是针对 CVE-2026-64725 的一个 PoC。有关详细信息，请参阅 源代码 和 博客文章。 如何复现？ 平台 已在 macOS 26.4.1（build 25E253；Darwin 25.4.0 xnu-12377.101.151；Apple Silicon T8103 / M1）上发现。 Apple 确认 macOS/iOS/iPadOS 26.6 均存在漏洞。 PoC 1. 确保你的 Mac 运行的是最新版 macOS 2. 确保你已安装 Python 3.6+ 和 clang 3. 将仓库克隆到你的 Mac 上 4. 生成一个最小化的畸形 AIFF...

The vulnerability of the `ieee80211_parse_tx_radiotap()` function in the `net/mac80211/tx.c` module of the `mac80211` stack implementation in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

EUVD-2026-71245

In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: fix folio size overflow in iovecfillbvec iovecfillbvec computes the folio size with a plain int 1: unsigned long foliosize = 1 folioshift; imu-folioshift is unsigned int and comes from folioshift of the folio backin...

CVE-2026-80810

CVE-2026-80810 is an out-of-bounds write/read vulnerability in the Linux kernel's io_uring resource management subsystem. The root cause is an integer overflow in io_vec_fill_bvec(), which computes the folio size using a plain int 1 shifted by imu->folio_shift. When folio_shift is 32 or greate...

The vulnerability of the dma_length() function in the drivers/accel/ethosu/ethosu_gem.c module of the Linux kernel’s acceleration device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmalength function in the drivers/accel/ethosu/ethosugem.c module of the Linux kernel’s acceleration device driver lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the i2cdev_ioctl() function in the drivers/i2c/i2c-dev.c file of the I2C driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the i2cdevioctl function in the drivers/i2c/i2c-dev.c file of the I2C driver in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `komeda_fb_afbc_size_check()` function in the `drivers/gpu/drm/arm/display/komeda/komeda_framebuffer.c` file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...