Aggregator

AI 下红队安全工具开发及对接（大模型+MCP）实践

先知技术社区
1 week ago
本文主要是讲 AI 时代下的红队安全工具的开发，以及如何把安全工具接到大语言模型里。涉及到 MCP 客户端的结合，分布式的 MSF 的命令的执行，如何独立的 session 管理，代码优化的思路及调试等内容。以红队安全工具开发的细节处理为初始点，让初学者也能玩转 MCP。

CVE-2025-68780 | Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2 cpudl_find state issue (Nessus ID 298404)

Vuldb Updates
1 week ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2. Impacted is the function cpudl_find. The manipulation leads to state issue. This vulnerability is documented as CVE-2025-68780. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-68778 | Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1 btrfs_log_new_name reference count (Nessus ID 298404)

Vuldb Updates
1 week ago
A vulnerability has been found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1 and classified as critical. Affected by this vulnerability is the function btrfs_log_new_name. The manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2025-68778. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2025-68777 | Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1 ti_am335x_tsc off-by-one (Nessus ID 298404)

Vuldb Updates
1 week ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1. This issue affects the function ti_am335x_tsc. This manipulation causes off-by-one. This vulnerability appears as CVE-2025-68777. The attacker needs to be present on the local network. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-68776 | Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1 prp_get_untagged_frame null pointer dereference (Nessus ID 298404)

Vuldb Updates
1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1. Impacted is the function prp_get_untagged_frame. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-68776. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-68773 | Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1 spi buffer overflow (Nessus ID 298404)

Vuldb Updates
1 week ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.2/6.19-rc1. This issue affects some unknown processing of the component spi. The manipulation results in buffer overflow. This vulnerability was named CVE-2025-68773. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.
vuldb.com

FortiSandbox XSS Vulnerability Let Attackers Run Arbitrary Commands

Cyber Security News
1 week ago

Fortinet has disclosed a high-severity cross-site scripting (XSS) vulnerability in its FortiSandbox platform, tracked as CVE-2025-52436 (FG-IR-25-093), that enables unauthenticated attackers to execute arbitrary commands on affected systems. Dubbed an “Improper Neutralization of Input During Web Page Generation” issue (CWE-79), the flaw resides in the graphical user interface (GUI) component and scores a 7.9. At […]

The post FortiSandbox XSS Vulnerability Let Attackers Run Arbitrary Commands appeared first on Cyber Security News.

Guru Baran

Managed ad