CVE-2026-98308

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are exhausted. Move the tracepoint after the NULL check because its payload accesses the assigned stream tag. Detected by...

CVE-2025-32044

CVE-2025-32044 —— Moodle 未经验证的REST API用户数据泄露 堆栈跟踪参数泄露 → 姓名、电子邮件、密码哈希 概述 CVE-2025-32044 是一个高严重性（CVSS 7.5）的 未经验证 信息泄露漏洞，存在于 Moodle LMS 4.5.0 至 4.5.2 中。 该漏洞位于 Moodle 的 REST API 异常处理器中 —— lib/classes/router/response/exceptionresponse.php 的 exceptionresponse::getpayloaddata。在修复之前，PHP 堆栈跟踪（包含函数参数 ）被包含在...

CVE-2026-56139

camel-undertow Rest DSL muteException スタックトレース開示再現器 CVE-2026-56139 このプロジェクトは、Apache Camel の camel-undertow Rest DSL コンシューマにおける 情報漏洩 の問題を示しています。追跡番号は CVE-2026-56139 です。muteException オプションは、キャッチされなかった処理例外の詳細を HTTP クライアントに返すかどうかを制御します。プレーンな undertow エンドポイントではこのオプションは機能しますが、undertow Rest DSL は...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: - BPF: The rcureadlockTraceheld function in bpfmaplookuppercpuelem needs to be checked. The bpfmaplookuppercpuelem helper function is also available for sleepable BPF programs. When BPF JIT is disabled or on a 32-bit host,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RISCV: Fixed an oops error caused by the irqsoff latency tracer. The tracehardirqson,off function requires the caller to properly set up the frame pointer. This is because these two functions use the macro ‘CALLERADDR1’ also...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fixed a sleeping function called from an invalid context in the RT kernel. When setting bootparams="traceevent=initcall:initcallstart tpprintk=1" in the cmdline, the outputprintk function is called, and spinlockirqsave i...

Efficient Auditing of Adversarial AI Agent Behavior from Agent Traces

AI agents powered by large language models LLMs can perform complex tasks but may harm the systems they operate in, either intentionally or unintentionally. Existing agent monitoring approaches rely on rule-based guardrails or LLM-based trace auditing. However, rule-based guardrails can be bypass...

Towards a Unified Misuse Monitoring Benchmark

LLM agents increasingly act in multi-actor environments, exposing them to misuse from multiple sources: decomposition attacks, where a harmful request is split into innocuous sub-requests, and prompt injection attacks, where a compromised tool delivers a malicious instruction. Existing evaluation...

CVE-2023-47459

CVE-2023-47459 説明 Knovos Discovery v.22.67.0 に脆弱性が発見されました。これにより、リモートの攻撃者が以下のコンポーネントを使用して機密情報にアクセスできる可能性があります: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName, /DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation,...

reverse-engineering-browser

Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...

vmp-devirt

vmp-devirt 跟踪辅助的 VMProtect 去虚拟化研究：版本前端 （1.x 门 / 2.x 表 / 3.x FDJ）馈入一个共享后端 （Remill 提升 → LLVM 优化 → 语义卡片 → 数据流 → 原生对象）。 已针对自建的 VMP 3.9.4 二进制文件在多种 保护模式下验证。VMP 3.8.x/3.10.x 兼容性为实验性且 依赖于样本。 范围与限制（请先阅读） 这是一个用于分析你拥有或获授权进行逆向工程的 VMProtect 保护二进制文件的研究平台 ——而非通用的、 一键式去虚拟化工具： VMP 3.7+ 需要执行 ：获取流、密钥和处理程序目标 来自插桩的...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException スタックトレースの開示 同じApache Camel脆弱性に対する実行可能な概念実証再現コードで、ランタイムごとに1つずつ用意されています： ランタイム| ディレクトリ| スタック| 表示されるコンポーネント ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| netty-http および undertow...

recon_2024_windbg_workshop

REcon 2024 - 使用 WinDbg 进行更好调试的技巧与诀窍 本仓库包含为 REcon 2024 上的研讨会“Tips & Tricks for better debugging with WinDbg”创建的材料。 环境搭建 该研讨会材料旨在为 WinDbg 在内核模式调试时提供有用的功能，但其概念同样可以很好地应用于用户模式调试。 要轻松搭建 KdNet 环境，可以： 创建一个 Windows 虚拟机，并使用 bcdedit /dbgsettings 进行设置 使用 WindowsSandbox Enable-WindowsOptionalFeature -All...

psr

指针序列逆向工具 旨在帮助逆向工程师轻松查看 Windows C++ 应用程序如何访问特定的数据成员或对象。 给定数据成员或对象的存储器地址，该工具将在此地址设置内存断点，然后生成在读取或写入该地址之前所执行指令的跟踪记录。会对跟踪记录执行一些处理，以突出显示相关指令、使输出更易读、识别 vtable 指针等。 若要构建，你需要从 Capstone 的“next”分支下载并构建它。然后，将 PSR 解决方案配置为在必要的 Capstone 目录中查找 .h 和 .lib 文件。...

PT-2026-104046

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace mindmap. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object...

CentOS Linux 8 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1784275029)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1784275029 advisory. - In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftraceops KASAN...

CVE-2026-102710

Attacker model / Preconditions: a loaded TXMMODULEUSERMODE | TXMMODULEMEMORYPROTECTION module issuing kernel dispatch calls, on a build with TXENABLEEVENTTRACE. A user-mode, memory-protected module can register an arbitrary function pointer as the global trace-full callback. The kernel calls it...

GHSA-P9F8-WVJ8-2FG8 OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

Summary The OpenTelemetry Go SDK trace package can fail to enforce AttributeValueLengthLimit for string attributes containing the valid Unicode replacement character U+FFFD. An oversized attacker-controlled attribute value that includes U+FFFD is returned untruncated, bypassing the configured...

OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation

Summary The OpenTelemetry Go SDK trace package can fail to enforce AttributeValueLengthLimit for string attributes containing the valid Unicode replacement character U+FFFD. An oversized attacker-controlled attribute value that includes U+FFFD is returned untruncated, bypassing the configured...

CVE-2026-102710

Attacker model / Preconditions: a loaded TXMMODULEUSERMODE | TXMMODULEMEMORYPROTECTION module issuing kernel dispatch calls, on a build with TXENABLEEVENTTRACE. A user-mode, memory-protected module can register an arbitrary function pointer as the global trace-full callback. The kernel calls it...