CVE-2024-10511

CVE-2024-10511 CWE-287：身份验证不当 摘要 Schneider Electric PowerChute Serial Shutdown 是一款UPS管理软件，可实现桌面、服务器和工作站的优雅系统关机和能源管理功能。 PowerChute Serial Shutdown v1.2.0.301及更早版本 包含一种机制，在三次登录失败后“锁定”2分钟，以防止暴力破解密码。PowerChute 一次只允许创建一个账户并激活一个登录会话。 未经身份验证的攻击者可以重复执行HTTP GET请求，访问以 /accessdenied...

CVE-2021-3166

Asus DSL-N14UB1 v.1.1.2.3805 中发现一个问题。攻击者可以将任意文件上传到固件框，只要将其重命名为 SettingsProductName.trx（例如 SettingsDSL-N14U-B1.trx）。文件加载后，会像真实更新一样触发大量服务的关闭措施，导致拒绝服务（DoS）状况。...

Linux Distros Unpatched Vulnerability : CVE-2026-90440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py or sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver: https://github.com/NateBrune/silk-guardian...

usbkill

« usbkill » 是一个反取证 kill-switch（紧急开关），它会等待 USB 端口发生变化，然后立即关闭你的计算机。 运行方式： sudo python usbkill.py 或 sudo python3 usbkill.py 相关项目；同样的思路，但实现为 Linux 驱动程序：https://github.com/NateBrune/silk-guardian 为什么？ 使用此工具的一些理由： 以防警察或其他暴徒闯入（或像 Ross 遇到的那样，当你在公共图书馆时偷走你的笔记本电脑）。警察通常使用「鼠标抖动器」来防止屏幕保护程序和睡眠模式被激活。 你不希望有人通过 US...

CVE-2026-90440

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-90440

Apache Thrift's D language implementation is vulnerable in the TNonblockingServer component due to improper handling of exceptional conditions and improper resource shutdown. This flaw allows an exception escaping a libevent callback to trigger an uncaught exception during server operations. A re...

EUVD-2026-91400

Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-26235-JUNG-Smart-Visu-Server-Unauthenticated-Reboot-Shutdown

👤 Autor Mohammed Idrees Banyamer 📍 País: Jordania 📸 Instagram: @banyamersecurity Prueba de concepto PoC para CVE-2026-26235 - Denegación de servicio no autenticada mediante la falta de autenticación en JUNG Smart Visu Server ≤ 1.1.1050. 🚨 Descripción de la vulnerabilidad CVE-2026-26235 es una...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc (crlsa-2026_49870)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649870 advisory. kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown CVE-2025-68214 Bug Fixes and Enhancements: Possible regression with...

Backdoor Containment Via Expert Quarantine and Shutdown in LLMs

Backdoored large language models LLMs can behave normally on benign inputs while producing attacker-specified outputs under hidden triggers. Existing defenses span four stages--prior-training, in-training, post-training, and inference-time--and share one of two underlying strategies: either...

CVE-2026-96274

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274 Uncaught exception in Baicells Nova 430H

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

CVE-2026-96274

The Baicells Nova 430H is vulnerable to a denial-of-service (DoS) condition where an unauthenticated device within radio range can send a malformed uplink message during connection setup. The flaw exists because the eNodeB fails to properly validate an invalid NAS payload , leading it to forward ...

EUVD-2026-89358

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload. Because the eNodeB does not properly validate this payload, it forwards the message to the core network, which can trigger a shutdo...

fire-hd-ownership

fire-hd-ownership Siendo dueño de la tableta que ya compré. En noviembre de 2022 compré una Fire HD 10 11.ª generación, modelo de 2021 en eBay por $114.26 para que fuera un kiosco de Home Assistant. Funcionó bien durante años, pero luego empezó a apagarse sola. Los registros decían por qué: el...

CVE-2021-43471

CVE-2021-43471 Vulnerabilidad de denegación de servicio causada por acceso no autorizado a impresoras Canon Producto afectado: LBP223 Fecha: 2021.11.3 El inicio de sesión en el Modo Administrador del Sistema no requiere contraseña de cuenta ni PIN. Un atacante puede apagar el dispositivo de forma...

Transformers-Forged-To-Fight-Offline-Version

Transformers: Forged to Fight，离线复兴交接 本软件包包含一个可正常工作的 Transformers: Forged to Fight 离线启动版本，以及用于实现这一目标的所有工具、补丁和逆向工程笔记。它的设计目的是交给那些有时间和精力去迈出下一步（即从头重建游戏服务器端内容）的人。这里的所有内容都有文档记录，这样你就不必像我一样从零开始。 在动手之前，请先通读本文件。特别是“陷阱”部分，它将为你节省数天时间。 目前真正能用的功能...

Dead.Letter-CVE-2026-45185

CVE-2026-45185 — “Dead.Letter” Exim 漏洞扫描器 用于检测 Linux 系统是否受 CVE-2026-45185 影响的 Shell 脚本，该漏洞是 Exim 邮件传输代理中的一个释放后使用漏洞，可导致远程代码执行。 专为 CI/CD 管道、配置管理工具和临时系统审计设计。同时输出人类可读和机器可读（JSON）格式的结果。 漏洞详情 CVE-2026-45185 （别名： Dead.Letter ）是 Exim 的 BDAT（二进制数据）消息体解析中的一个释放后使用缺陷，当通过 GnuTLS 处理 TLS 时被触发。 在 TLS 关闭期间，Exim 释放...

DEBIAN-CVE-2026-15442

In all builds that make use of DTLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after free. If an application ended up getting a partial wolfSSLread which is sometimes caused by a small user buffer passed in, then calle...