CVE-2025-27363

CVE-2025-27363（Chrome 113 上） 注: Chrome では、これは新しい脆弱性ではありません。2023年3月に（ロールアップコミットで）パッチが適用されています。このPoCは Chrome ヘッドレスモードのみを対象としています。ただ、内部構造を探索して、小さな slotsize がある場合の PartitionAlloc 上の悪用手法を見たいなら、興味深い読み物だと思います xD 作者: Altin tin-z 環境: コミット a7a083d ubuntu 20/24 目次: 分析と悪用の解説 pocrce pocleak tests...

BGGP

Binary Golf Grand Prix このリポジトリには、Binary Golf Grand Prix のファイルが年ごとに分類されています。BGGP は年次の小ファイルコンテストであり、参加者は指定された機能を実行する可能な限り小さなファイルを作成します。ファイルサイズは最大 4096 バイトです。 年| テーマ| 説明 ---|---|--- BGGP1 2020| 回文| 前方と後方で同じ動作をする最小のバイナリ。ファイルのミラーリングされた半分で実行する必要があります BGGP2 2021| ポリグロット|...

FARO

FARO（文档敏感度检测器） 目录 这是什么 这里有什么？ 使用 Docker 运行 FARO 在宿主机上运行 FARO 前提条件 虚拟环境 依赖项 NER 模型 FARO Spider 单个文件检测 技术细节 FARO 实体检测器 配置 支持的输入文件格式 技术 测试 安装 Git-LFS FARO 检测附加参数 已知问题 贡献者 这是什么 FARO 是一个用于检测组织中文档敏感信息的工具。它面向那些希望追踪组织内部敏感文档，但又不愿花费大量时间和金钱配置复杂数据保护工具的小公司和特定用户。 FARO 从文档中提取敏感指标（例如文档...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent lpfcdebugfslockstatwrite buffer overflow A static code analysis tool identified the possibility of buffer overflow when using copyfromuser for a debugfs entry. Currently, it is possible that copyfromuser copie...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfs: Only call foliostartfscache once for each folio. If a network filesystem using netfs implements a clamplength function, it can set subrequest lengths that are smaller than the page size. When we loop through the folios in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid infinite loops when trying to resize the local TT. If the MTU of one of the attached interfaces becomes too small to transmit the local translation table, then it must be resized to fit within all fragments when...

zephyr

.. raw:: html Zephyr Project は、複数のハードウェアアーキテクチャをサポートし、リソースが制約されたデバイス向けに最適化され、セキュリティを考慮して構築された、スケーラブルなリアルタイムオペレーティングシステム RTOS です。 Zephyr OS は、リソースに制約のあるシステムでの使用を目的として設計された、フットプリントの小さなカーネルをベースにしています。単純な組み込み環境センサーや LED ウェアラブルから、高度なスマートウォッチや IoT ワイヤレスゲートウェイまでを対象としています。 Zephyr カーネルは、ARM...

CVE-2026-90575

A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of the argument geopluginURL causes deserialization. It is possible to initiate the attack remotely. The complexit...

CVE-2026-90575

PHPGurukul Small CRM 4.0 contains a deserialization vulnerability in the Login Success Handler component (file /crm/login.php). Manipulation of the geopluginURL argument allows an unauthenticated remote attacker to trigger the unsafe unserialize function, resulting in low integrity impact . The a...

EUVD-2026-77060

A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of the argument geopluginURL causes deserialization. It is possible to initiate the attack remotely. The complexit...

ProbeManager

ProbeManager .. image:: https://www.ko-fi.com/img/donatesm.png :alt: 후원 :target: https://ko-fi.com/mtreussart |Licence| |Version| .. image:: https://api.codacy.com/project/badge/Grade/afc2ab5226584ac3b594eb09ebcc2ccc?branch=master :alt: Codacy 등급 :target:...

DEBIAN-CVE-2026-87735

An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...

CVE-2026-87735

An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...

CVE-2026-87735

An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...

Astra Linux – Vulnerability in Linux

In the IPv4 implementation in the Linux kernel before 5.12.4, the net/ipv4/route.c file has an information leak because the hash table is very small...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Freeing irq vectors in order for v3 HW If the driver probe fails to request the channel IRQ or fatal IRQ, the driver will free the IRQ vectors before freeing the IRQs in freeirq, and this will cause a kernel BUG li...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: core: There is a race condition where the error handler is only awakened when the last running command completes or times out. This race condition can cause the SCSI layer to fail to awaken the error handler, resulting i...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: nilfs2: Fixed data corruption in the dsync block recovery process for small block sizes. The helper function nilfsrecoverycopyblock in nilfsrecoverydsyncblocks incorrectly calculates the on-page offset when copying repair data...

Astra Linux – Vulnerability in OpenCV

A out-of-bounds read was discovered in OpenCV prior to version 4.1.1. Specifically, the variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this assumption is incorrect when dealing with small images, resulting in...

Astra Linux – Vulnerability in Qemu

A NULL pointer dereference flaw was discovered in the SCSI emulation support of QEMU in versions prior to 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The greatest threat from this vulnerability is to system availability...