Harden-Windows-Security

Harden Windows Security | Una Nueva Amenaza para el Malware Protege Windows de Forma Segura, Fiable y Solo con Métodos Oficiales de Microsoft...

Docker-Security

Docker 安全 这是 OWASP Docker Top 10。它是一份正在进行中的工作。 关于本文档 本文档描述了构建安全容器化环境时最重要的 10 个安全要点。如果你从零开始，可以把它当作一份规格说明书；也可以把它交给为你做这项工作的外包承包商。 它也可以用于审计或加固现有安装环境，但尤其在这种情况下，你应该尽早开始考虑安全问题。最好是在设计阶段。到后期，要么很难更改你已做的某些决策，要么这些更改会在金钱或时间上付出高昂代价。 名称 尽管这份文档的名称与 OWASP Top 10 相似，但它其实很不一样。首先，它并非像 OWASP Top 10...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...

Snow Crash

Snow Crash 本项目是计算机安全的入门教程。Snow Crash 将通过以开发者为中心的方式，帮助你探索安全领域的多个子方向。你将熟悉多种语言（汇编、Perl、PHP 等），培养理解未知程序的逻辑思维，并意识到简单编程错误可能引发的问题。 描述 Snow Crash 是 42 学校网络安全分支的第一个项目。它介绍了一些知名的系统漏洞，主要聚焦于 Linux 操作系统，迫使我们去深入了解它并理解它如何可能被利用。 我们学习的主要主题包括： Linux 文件系统与命令 用户权限 Shell 和 Perl 脚本编写 C 与 PHP 可执行文件 评估 我们于 2025 年 2...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: PCI: Endpoint – Fix for misused goto labels. A misused goto label jump can lead to a memory leak. This issue has been addressed...

Astra Linux – Vulnerability in sssd

A flaw was discovered in SSSD, where the sssctl command was vulnerable to shell command injection through the logs-fetch and cache-expire subcommands. This flaw allows an attacker to trick the root user into executing a specially crafted sssctl command, such as using sudo, in order to gain root...

CVE-2026-55622

Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new projec...

SUSE CVE-2026-68742

A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...

SUSE CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

SUSE CVE-2026-68744

A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...

ROOT-APP-NUGET-CVE-2026-33116 CVE-2026-33116 in Rootio.System.Security.Cryptography.Xml - Patched by Root

Root has patched CVE-2026-33116 in the Rootio.System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available...

CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

UBUNTU-CVE-2026-68743

A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...

CVE-2026-68743

SSSD's extract_authtok_v1() in the PAM responder skips validation of auth_token_length against the buffer, allowing a local attacker to trigger an out-of-bounds read and crash via a crafted protocol v1 request. Nessus flags unpatched distros; no in-the-wild exploitation is reported. Apply vendor ...

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

Security update for bind

This update for bind fixes the following issues CVE-2026-11622: Potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: Cache poisoning possible with label count discrepancy, RRSIG, and wildcards bsc1271987. CVE-2026-13204: Unexpected exit in certain situations with NSEC and...