CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks 本地实验环境 用于分析和复现 WordPress 插件 Spectra Gutenberg Blocks （ultimate-addons-for-gutenberg）中 CVE-2026-7465 的本地 Docker 实验环境。 本实验环境对比： vuln：Spectra 2.19.25 patched：Spectra 2.19.26 该验证刻意采用最小危害（least-harm）原则。它不会执行 shell 命令、上传文件、创建用户或直接修改容器。PoC 会创建一个临时的 WordPress...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the nattr field in the DRM/AMDKFD context, where no validation is performed for buffer size. This...

Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster

htmlEscaped in leaf-kit will only escape html special characters if the extended grapheme clusters match, which allows bypassing escaping by using an extended grapheme cluster containing both the special html character and some additional characters. In the case of html attributes, this can lead ...