Aggregator

MCP Python SDK 的传输层做了 Host/Origin 校验（421 拦截），但同一个文件里另一个类——create_auth_routes() 自带的 OAuth 授权服务器——没做。7 个 OAuth 端点全军覆没：注册客户端（返回 client_secret）、授权、换令牌、自省全不拦 Host。DNS rebinding 配合下能拿到受害者令牌。配套 mcp-as-hostch

一个键名后面还有没有点号，本该在本行之内就能确认。在 smol-toml ≤ 1.8.0 里，这个判断被做成了以整篇文档为范围的全文搜索。smol-toml 是 Squirrel Chat 维护的轻量 TypeScript TOML 解析器。

TurboFan 把两条返回类型不同的 JS→Wasm 调用点内联进同一个函数时，帧状态判等函数漏掉了 Wasm 签名的比较，两份帧状态被判成同一份；一次惰性反优化之后，返回值按错误的类型物化——对象地址被读成整数，整数被当成对象指针。

题目比较综合，考查取证的基本思路

Struts OGNL 注入：Source/Sink 建模、误报剔除与路径验证

SunshineCTF 2026 一道 Web 题的完整复现。JWT header 里的 kid 被当成文件名拼进路径，服务端读到什么文件就把内容当签名密钥，这个字段于是变成了任意文件读取的入口。而编辑器密钥硬编码在源码里，源码又能从同一个口子读到——读者证就此变成编辑证。

Athena-AI+雅典娜安全竞赛平台

这是一篇万字的完整溯源分析。我们沿攻击者实际使用的参数逐层跟进源码，完整还原了 weax 勒索家族利用某国产 ERP 通杀 0day 入侵、投递、绕过查杀、落地加密的全过程，并对攻击者遗留的多层混淆载荷逐层解码。赶时间的读者可直接查看文末 IOC 清单与修复建议；有条件的读者，我们建议完整阅读，这是一次不常见的、证据链完整闭环的 0day 攻击溯源实录。

Даже после удаления заражённой версии на компьютере могут остаться вредоносные фоновые задания.

电子数据作证据使用,在执纪执法必需依法调取、重点分析结合全案定性,切不可违纪违法收集证据。

▎先说一个案子：7 分 41 秒的语音，成了定案证据 一起诈骗案里，被害人报案时提交了手机里和对方的微信语

Hardware wallet device maker Trezor has received credible reports about a suspected hardware crypto-theft implant in a Trezor Safe 5 sold by its reseller CryptoBilis in Southeast Asia. [...]

A vulnerability was found in Linux Kernel up to 6.6.50/6.10.9 and classified as critical. The affected element is the function ice_xdp. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2024-46765. The attacker must have access to the local network to execute the attack. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.50/6.10.9. It has been rated as critical. This impacts the function pmd_trans_huge of the component userfaultfd. Performing a manipulation results in denial of service. This vulnerability is known as CVE-2024-46787. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.10.8. Affected by this vulnerability is an unknown functionality of the component AMD Display. Performing a manipulation of the argument link_index results in out-of-bounds read. This vulnerability is known as CVE-2024-46813. Access to the local network is required for this attack. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.49/6.10.8. This affects the function fpu_update_bw_bounding_box of the component AMD Display. The manipulation leads to reachable assertion. This vulnerability is listed as CVE-2024-46811. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.49/6.10.8. This vulnerability affects unknown code of the component stm32. Such manipulation leads to uncontrolled recursion. This vulnerability is traded as CVE-2024-47658. Access to the local network is required for this attack to succeed. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.53/6.10.12/6.11.1. This vulnerability affects unknown code of the file vdec_h264_req_if.c of the component vcodec. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2024-47752. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.10.13/6.11.2. The affected element is the function rcu_tasks_need_gpcb of the component rcu-tasks. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2024-49926. The attack can only be initiated within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.6.58/6.11.5. Impacted is the function nvme_dev_disable of the file drivers/pci/msi/api.c of the component nvme-pci. Performing a manipulation results in race condition. This vulnerability was named CVE-2024-50135. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.