Aggregator

Linux Privesc official course to master LinPEASCheck https://hacktricks-training.com/courses/l

Unmask the hidden before the world does RedAmon is a next-generation, enterprise-

Over a decade (or two, or three) ago we (reversers) used to face a lot of anti-reversing tricks.

深入理解 Linux File Descriptor（文件描述符）：从历史演进到底层内核与 Bash 实战一、 来龙去脉：为什么需要 File Descriptor

受益于疫苗接种，美国自 2000 年起被认定“消灭”了麻疹。但最近几年疫苗接种率持续下降，麻疹卷土重来在美国多地再次流行。如果由同一毒株引起的感染在同一国家内持续发生人际传播，且时间至少达到一年，那么该感染即被视为“地方性流行”，即失去消除地位。犹他州的研究人员今年 8 月报告，麻疹同一毒株引起的感染在该州持续传播超过一年。今年美国已报告逾 5400 例麻疹病例，创下自 1991 年以来的最高纪录。今年报告的病例几乎所有患者此前都未接种过麻疹、腮腺炎和风疹（MMR）疫苗，或者其疫苗接种状况不明。根据美国各州的报告，至少 10 人在感染麻疹后死亡。

Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records through a compromised third-party provider. A newly formed Russian cyber extortion group called n0n claims it has hit Expedia, the world’s second-largest online travel agency, and taken data on nearly one billion travelers. Expedia confirmed to Skift on Thursday that attackers […]

A vulnerability classified as problematic was found in Ollama up to 0.17.5 on Windows. The impacted element is an unknown function of the component Digital Signature Handler. Executing a manipulation can lead to download of code without integrity check. This vulnerability is handled as CVE-2026-42248. The attack can be executed remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, has been found in Ollama up to 0.17.5 on Windows. This affects an unknown function of the component Update Handler. The manipulation leads to download of code without integrity check. This vulnerability is uniquely identified as CVE-2026-42249. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability, which was classified as critical, has been found in EnTech TVicPort 4.0. The affected element is an unknown function in the library TVicPort64.sys of the component IOCTL Handler. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2026-30769. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability was found in pgjdbc up to 42.7.10. It has been rated as problematic. This impacts an unknown function. Performing a manipulation results in allocation of resources. This vulnerability is identified as CVE-2026-42198. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as problematic was found in OpenClaw up to 2026.4.7. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to incorrect authorization. This vulnerability is tracked as CVE-2026-42432. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in GNU C Library up to 2.33. This impacts the function ns_printrrf/ns_printrr/fp_nquery of the component DNS Response Handler. This manipulation causes buffer over-read. This vulnerability is registered as CVE-2026-6238. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in libsndfile 1.2.2. Affected is an unknown function of the component WAV File Handler. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-2026-37555. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability classified as critical has been found in OpenClaw up to 2026.4.7. Affected is an unknown function. Performing a manipulation results in incorrect authorization. This vulnerability is identified as CVE-2026-42429. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenClaw up to 2026.4.7. It has been classified as problematic. Impacted is an unknown function. Performing a manipulation results in missing support for integrity check. This vulnerability is reported as CVE-2026-42428. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.