CVE-2026-34197

CVE-2026-34197 描述 Apache ActiveMQ Broker、Apache ActiveMQ 中存在不当输入验证、代码生成控制不当（'代码注入'）漏洞。Apache ActiveMQ Classic 在 Web 控制台的 /api/jolokia/ 路径下暴露了 Jolokia JMX-HTTP 桥接。默认的 Jolokia 访问策略允许对所有 ActiveMQ MBean（org.apache.activemq:）执行 exec 操作，包括 BrokerService.addNetworkConnectorString 和...

Penetration-Test

渗透测试 针对 IP（Ubuntu 虚拟机）的完整渗透测试报告。攻击链：目录枚举 → 备份文件发现 → 密码破解 → CMS 文件上传 → 反弹 Shell → 内核权限提升（Dirty Pipe，CVE-2022-0847）。 仓库结构 /report – 最终渗透测试报告（PDF） /exploits – 自定义 payload 与漏洞利用源代码 /enumeration – 字典、哈希值与枚举输出 /logs – Metasploit 控制台日志、nmap 扫描结果（如有） 使用的工具 Nmap、Gobuster、John the...

CVE-2026-45197

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197

CVE-2026-45197 affects the Imagination Technologies GPU DDK , specifically a TOCTOU (Time-of-Check to Time-of-Use) bug in psFWMemContext->uiPageCatBaseRegSet. Kernel software running inside a Guest VM can post improper commands to the GPU Firmware, which validates memory access parameters prov...

EUVD-2026-70858

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

CVE-2026-45197 GPU DDK - TOCTOU affecting psFWMemContext->uiPageCatBaseRegSet

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory. The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a...

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

...

kernel: net: mana: validate rx_req_idx to prevent out-of-bounds array access

A flaw was found in the Linux kernel's mana network driver. In Confidential Virtual Machines VMs, a missing bounds check when processing network events can allow a malicious hardware component or a compromised VM to write data outside of an intended memory region. This out-of-bounds access could...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-75538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length...

PT-2026-85032

Broadcom has fixed Critical security vulnerabilities in VMware Workstation and Fusion. CVE-2026-59346 CVE-2026-59347 https://t.co/OY9uOeyBn8...

CVE-2026-49249

Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, BorutaIdentityWeb.UserSettingsController.update/2 atomizes every key of the user-supplied request body via String.toatom/1 before a...

EUVD-2026-70240

Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, BorutaIdentityWeb.UserSettingsController.update/2 atomizes every key of the user-supplied request body via String.toatom/1 before a...

CVE-2026-49249 Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2

Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, BorutaIdentityWeb.UserSettingsController.update/2 atomizes every key of the user-supplied request body via String.toatom/1 before a...

CVE-2026-49249

Boruta is a standalone OAuth 2.0 and OpenID Connect authorization server. Prior to version 0.10.0 , the BorutaIdentityWeb.UserSettingsController.update/2 handler atomizes every key of the user-supplied request body via String.to_atom/1 before any validation. Since String.to_atom interns atoms per...

FreeBSD : Erlang/OTP -- remote crash via gen_tcp with {packet,4} (62b56853-a609-11f1-9195-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 62b56853-a609-11f1-9195-4c526214c986 advisory. The OTP 29.0.6 release notes report: A gentcp socket using the inet driver and packet,4 had a bug if...

akamai-vm-reverse

akamai-vm-reverse 反编译并清理过的 Akamai v3 VM，驱动最新的 sensordata 挑战脚本...

CVE-2010-4176

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:46+00:00| seen| https://t.me/hackingAttack/49649 2026-09-01 20:01:51+00:00| seen| https://t.me/hackingAttack/45702 2026-09-02 01:01:58+00:00| seen| https://t.me/hackingAttack/49649 2026-09-02 01:02:04+00:00| seen|...

DEBIAN-CVE-2026-75538

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...

CVE-2026-75538

An attacker that connects to an open Erlang TCP port that uses the inet driver with packet,4 mode can use a signed overflow in an incorrect packet length calculation to overflow the receive buffer into the VM allocator area and beyond up to about 2 GB. This would easily trash the allocated block'...