Docker-Security

Docker 安全 这是 OWASP Docker Top 10。它是一份正在进行中的工作。 关于本文档 本文档描述了构建安全容器化环境时最重要的 10 个安全要点。如果你从零开始，可以把它当作一份规格说明书；也可以把它交给为你做这项工作的外包承包商。 它也可以用于审计或加固现有安装环境，但尤其在这种情况下，你应该尽早开始考虑安全问题。最好是在设计阶段。到后期，要么很难更改你已做的某些决策，要么这些更改会在金钱或时间上付出高昂代价。 名称 尽管这份文档的名称与 OWASP Top 10 相似，但它其实很不一样。首先，它并非像 OWASP Top 10...

Harden-Windows-Security

Harden Windows Security | 恶意软件的新威胁 安全加固 Windows，仅使用微软官方方法 使用方法 相关项目 信任 支持 安全建议 资源 许可证 Wiki 常见问题解答 路线图 捐赠 !IMPORTANT 以下是本仓库重要部分的快速访问入口 Harden System Security 应用 AppControl Manager 应用 应用程序控制商业资源 !NOTE 本仓库仅使用微软已在 Windows 操作系统中实现的功能，将其微调至最高安全性和锁定状态，不依赖任何第三方组件或依赖项，使用有充分文档记录、受支持、推荐且官方认可的方法。请继续阅读以获取全面信息...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

Snow Crash

Snow Crash このプロジェクトは、コンピュータセキュリティへの入門です。Snow Crash は、開発者志向のアプローチで、さまざまなサブドメインにおけるセキュリティを発見する手助けをします。ASM、Perl、PHP などの複数の言語に親しみ、未知のプログラムを理解するための一定の論理的思考を身につけ、単純なプログラミングミスに関連する問題に気づくようになります。 説明 Snow Crash は、42 スクールのサイバーセキュリティ部門における最初のプロジェクトです。これは、よく知られているいくつかのシステム脆弱性への入門として機能し、主に Linux...

ROOT-APP-NUGET-CVE-2026-33116 CVE-2026-33116 in System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-33116 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

PT-2026-95265

Name of the Vulnerable Software and Affected Versions product affected versions not specified Description An improper authentication issue allows remote attackers to compromise system security. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

UBUNTU-CVE-2026-90995

A flaw was found in SSSD System Security Services Daemon. A local attacker with privileges to connect to the PAM Pluggable Authentication Modules responder socket can send a specially crafted protocol request. If the pamappservices configuration is enabled and the service item is omitted from the...

CVE-2026-90995

A flaw was found in SSSD System Security Services Daemon. A local attacker with privileges to connect to the PAM Pluggable Authentication Modules responder socket can send a specially crafted protocol request. If the pamappservices configuration is enabled and the service item is omitted from the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: PCI: Endpoint – Fix for misused goto labels. A misused goto label jump can lead to a memory leak. This issue has been addressed...

Astra Linux – Vulnerability in sssd

A flaw was discovered in SSSD, where the sssctl command was vulnerable to shell command injection through the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into executing a specially crafted sssctl command, such as using sudo, in order to gain root...

Harden-Windows-Security HardenSystemSecurity-v1.0.88.0

Harden Windows Security | A New Threat to Malware Harden Windows Safely, Securely, Only With Official Microsoft Methods How To Use Related Trust Support Security Recommendations Resources License Wiki Basic FAQs Roadmap Donation !IMPORTANT Here are Quick Access Points to Important Sections of thi...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new projec...

SUSE CVE-2026-68742

A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...

SUSE CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

SUSE CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...

EulerOS 2.0 SP15 : sssd (EulerOS-SA-2026-2911)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the System Security Services Daemon SSSD. The pampasskeychildreaddata function within the PAM passkey responder fails to properl...

CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...