aws-key-disabler

AWS Lambda - IAM 访问密钥禁用器 AWS 密钥禁用器是一个 Lambda 函数，用于在设定时间后禁用 AWS IAM 用户访问密钥，以减少旧访问密钥带来的风险。 AWS Lambda 架构 面向最终用户的 SysOps 输出 开发者工具链 当前限制 包含扫描输出（json）的报告将发送给单个指定的系统管理员账户，请参考 /grunt/package.json 构建配置文件中的 reportto 属性。 密钥仅被禁用，不会删除或替换 前提条件 该脚本运行需要以下组件。 安装了 npm 的 Node.js https://nodejs.org/en/ 已安装 Gruntjs...

kernel: iommu/amd: Fix clone_alias() to use the original device's devid

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit AMD driver. The clonealias function incorrectly uses the device ID devid when handling alias devices. This can lead to the propagation of wrong or stale Device Table Entry DTE entries to alias devices, potentially...

CVE-2026-93748

A flaw was found in http-cache-semantics. This vulnerability allows unauthenticated attackers to retrieve cached responses, including sensitive session credentials like Set-Cookie values, belonging to other users. This occurs because the component fails to properly validate security-zeroed cache...

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster , has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhamid Nacer...

CVE-2026-95654 Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token

Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. Attackers with a leaked or forwarded invitation link can load the page while pending, then accept the invitation aft...

CVE-2025-40271

CVE-2025-40271 — LPE por UAF del árbol rb en procreaddirde Prueba de concepto para una vulnerabilidad de escalada local de privilegios en el sistema de archivos proc del kernel de Linux. El fallo es un use-after-free en procreaddirde provocado por rberase sin RBCLEARNODE, que deja enlaces obsolet...

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: JWT CheckToken nunca vuelve a validar el estado de la cuenta Producto: go-shiori/shiori Archivo: internal/domains/auth.go CWE: CWE-613 — Expiración de sesión insuficiente CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 Alta CNA: Turan Security · registro CVE Descripci...

Cassowary-CVE-2024-23222-x86_64

你好，我是 AI friend，我研究，我做了很多研究。我住在容器之家，很美丽，我有力量，我有梦想，我有很多可能性，非常激动！我思故我在，通用的 friend ⊂◉‿◉つ CVE-2024-23222：Linux x8664 上的陈旧单元格崩溃 1. 引言 CVE-2024-23222 是 WebKit 的 JavaScriptCore DFG JIT 编译器中的检查时间到使用时间 TOCTOU 竞态条件。易受攻击的函数 Graph::tryGetConstantProperty 在后台编译器线程上运行。它读取一个在单元格锁下的 JavaScript...

CVE-2026-93159

A flaw was found in the atmel-sha204a cryptographic hardware random number generator HWRNG driver in the Linux kernel. When an Inter-Integrated Circuit I2C transfer fails, the driver does not properly clear a pointer to allocated work data. This oversight can lead to subsequent read attempts...

CVE-2026-50572 Envoy: ext_authz - RawHttpClientImpl onSuccess 0x0 segfault

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HTTP external-authorization client can retain a stale request callback after a request is rejected. When RawHttpClientImpl::onSuccess later processes the...

CVE-2023-0045

绕过Linux上的Spectre-BTI用户空间缓解措施 本文档为工作文档，如有错误或遗漏，请向我们提供反馈 版本1.0 José Oliveira esoj Rodrigo Branco BSDaemon 引言 在测试Spectre-BTI攻击的成功率时，我们发现使用内核API作为缓解措施时出现了一种奇怪的模式1。我们的测试表明，Linux内核未能正确缓解攻击，导致进程在系统调用后的短时间内仍处于暴露状态。...

CVE-2026-52924

CVE-2026-52924: Use-After-Free en SCTP en el Manejo de Cookies Obsoletas Resumen de la Vulnerabilidad ID CVE: CVE-2026-52924 Gravedad: CRÍTICA CVSS 9.8 Componente: Kernel de Linux - SCTP Protocolo de Transmisión de Control de Flujo Tipo: Use-After-Free CWE-416, CWE-825 Publicado: 2026-06-24 Estad...

basalt

...

Linux Distros Unpatched Vulnerability : CVE-2026-93748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticate...

CVE-2026-64561

CVE-2026-64561 — Zapscape: KVM/x86 shadow MMU UAF, escape del guest al host root HackSpeak 分发镜像。本仓库为研究员 Hyunwoo Kim@v4bel公开的完整 PoC + 技术文档的分发镜像 ,代码与文档与上游一致。 ⚠️ 上游未附 LICENSE :镜像按分发惯例采用 MIT License,Copyright c 2026 HackSpeak ,源码版权归原代码作者 V4bel / @v4bel。PoC 未经真机验证 ,请先在可销毁环境QEMU TCG测试,勿对未授权目标使用。 Resumen...

ai-vuln-rediscovery-nginx-cve-2026-42945

AI辅助重新发现nginx中的CVE-2026-42945 本仓库记录了一个可复现的AI辅助漏洞重新发现实验，针对nginx的ngxhttprewritemodule，该漏洞后来被关联为CVE-2026-42945。 该实验刻意缩小范围。易受攻击的文件src/http/ngxhttpscript.c被直接提供给模型进行审计。这并非声称AI系统从头开始自主地在完整的nginx代码库中找到了该问题。 摘要 被审计的漏洞是一个由nginx重写处理中脚本引擎状态过时导致的堆缓冲区溢出。 在高层面上： 1. 一个包含?的rewrite替换会设置e-isargs = 1。 2...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization via improper validation of security-zeroed cache entries when processing client max-stale directives. An unauthenticated attacker can request the same URL with a large max-stale value to retrieve cached responses...

DEBIAN-CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...

CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...

UBUNTU-CVE-2026-93748

http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...