research-labs

研究者的实验室 此仓库包含一些有意设计为易受攻击的应用程序，您可以用它们来探索由PortSwigger Research发现的漏洞。 请注意，您可以在Web Security Academy中找到许多由PortSwigger Research设计的免费在线实验室。 目录 SignSaboteur Web令牌签名器 浏览器PDF渲染差异 ASCII控制字符命令注入 警告 运行这些实验室会在您的本地机器上创建易受攻击的网站。如果您将这些网站暴露给其他系统，它们可能会被黑客攻击。...

CVE-2026-8863

CVE-2026-8863 受到 CVE-2026-8863 影响的已签名 UEFI Secure Boot shim 二进制文件集合，包含每个映像的嵌入 shim 版本、Authenticode 签名者和吊销哈希值。 发布版本中如果包含字节完全相同的已签名 shim，则合并为一行——一个 Authenticode 哈希对应一个 dbx 条目，无论有多少个发布版本携带它。 详情请查看我的博客。 概览 发行版| 版本| shim| 嵌入厂商 CA ---|---|---|--- CentOS| 7.2, 7.3| 0.9| Red Hat Inc. Fedora| Server 24-1....

Moderate: Red Hat Security Advisory: RHTAS 1.3.7 - Red Hat Trusted Artifact Signer Release

The 1.3.7 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19...

Important: Red Hat Security Advisory: RHTAS 1.3.7 - Red Hat Trusted Artifact Signer Release

The 1.3.7 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19...

Moderate: Red Hat Security Advisory: RHTAS 1.3.7 - Red Hat Trusted Artifact Signer Release

The 1.3.7 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19...

CVE-2026-66795

The managedcluster-import-controller's CSR auto-approver skips validation of signer name, certificate subject, and requester identity, letting a privileged spoke-cluster service account submit a malicious CSR and escalate to hub-cluster admin. CVSS 9.1 critical; no exploitation evidence provided....

CVE-2026-66795

A flaw was found in the managedcluster-import-controller. The Certificate Signing Request CSR auto-approval logic improperly validates incoming CSRs, specifically by not inspecting the signer name or decoding the PEM-encoded x509 CSR. This vulnerability allows a privileged service account on a...

CVE-2026-56860 vulnerabilities

Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...

GO-2026-6218 vulnerabilities

Vulnerabilities for packages: rancher-telemetry, policy-controller, flux-image-automation-controller, aws-load-balancer-controller, hubble-ui, external-dns, aws-signer-notation-plugin, cluster-api-azure-controller, crane, rancher-fleet, swagger, crossplane-provider-aws-cloudfront, rootlesskit,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: neuvector-sigstore-interface, step, rancher-telemetry, ksops, sriov-network-device-plugin, goreleaser, kubernetes-dashboard-api, policy-controller, kubo, flux-image-automation-controller, headlamp, nri-f5, hubble-ui, aws-flb-cloudwatch, paranoia, external-dns, extism...

AZL-95472 CVE-2026-64655 affecting package gh for versions less than 2.97.0-1

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...

CVE-2026-64655

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...

UBUNTU-CVE-2026-64655

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...

CVE-2026-64655

GitHub CLI (gh) prior to v2.97.0 builds the certificate Subject Alternative Name matcher from --signer-repo and --signer-workflow values without escaping regex metacharacters, causing user-supplied names to be treated as regular expressions. Because characters like '.' can appear in repository/wo...

CVE-2026-64655 GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...

Important: Red Hat Security Advisory: RHTAS 1.0.2 - GA Release Of the Policy Controller Operator

The GA release of the RHTAS Policy Controller Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Policy Controller Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.1...

Important: Red Hat Security Advisory: RHTAS 1.4 - GA Release of Model Transparency 1.0.3

The GA release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

Important: Red Hat Security Advisory: RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release

The 1.4.3 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20...

Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release

The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...

Important: Red Hat Security Advisory: RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release

The 1.4.3 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS Operator can be used with OpenShift Container Platform 4.17, 4.18, 4.19, 4.20...