Aggregator

我在韩先楚身边的日子

青衣十三楼飞花堂
1 month 1 week ago
他回忆同他搭过班子的政治委员时说：“袁升平为人品德很好。政治工作经验丰富，平易近人。我们合作很好。”紧接着他自我总结分析说：“我就是与叶飞没合作好。”

M3RX

Dark Feed IO
1 month 1 week ago

You must login to view this content

cohenido

Malicious npm Package Stole Files From Claude AI User Directory via GitHub

The Hackers News
1 month 1 week ago
Cybersecurity researchers have discovered a new malicious package on the npm registry that comes with information stealing capabilities. According to OX Security, the package, named "mouse5212-super-formatter," is designed to upload files from "/mnt/user-data," a dedicated directory used by Anthropic's Claude artificial intelligence (AI) tool to handle uploads and outputs in the background. The
The Hacker News

《巫师3》将于明年推出新资料片《旧时曲》

Solidot
1 month 1 week ago
CD PROJEKT RED 宣布《巫师3》的第三部资料片《旧时曲（Songs of the Past）》将于明年推出。《巫师3：狂猎》于 2015 年 5 月发布，2015 年 10 月与 2016 年 6 月分别发布了两个资料片《石之心》和《血与酒》。《巫师3》饱受赞誉，至今销量逾 6000 万份，是史上最畅销的游戏之一。《旧时曲》由 CD PROJEKT RED 与 Fool’s Theory 联合开发，Fool’s Theory 由之前参与《巫师》系列的前 CD PROJEKT RED 开发者组建，它正在开发的一个项目是第一部《巫师》的重制版。在《旧时曲》中，玩家将再次扮演猎魔人利维亚的杰洛特，开启一段全新的冒险之旅。更多信息将于夏末公布。这部资料片被广泛视为是为即将推出的《巫师4》预热。

Motorola Phones Preinstalled App Found Hijacking Amazon App to Inject Affiliate Codes

Cyber Security News
1 month 1 week ago

A hidden system application bundled with Motorola smartphones has been caught intercepting user-initiated Amazon app launches and silently redirecting them through affiliate tracking URLs, raising serious concerns about supply chain integrity, user consent, and undisclosed revenue practices on premium Android devices. The behavior was first reported by a Motorola Razr 60 Ultra user on Reddit, […]

The post Motorola Phones Preinstalled App Found Hijacking Amazon App to Inject Affiliate Codes appeared first on Cyber Security News.

Guru Baran

CVE-2026-46090 | Linux Kernel up to 6.12.87/6.18.26/7.0.3/7.1-rc1 ALSA loopback_check_format streams[] use after free

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.87/6.18.26/7.0.3/7.1-rc1. Affected by this issue is the function loopback_check_format of the component ALSA. The manipulation of the argument streams[] results in use after free. This vulnerability is reported as CVE-2026-46090. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2026-46037 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 ipv4 array_index_nospec icmp_pointers[] privilege escalation

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. Affected by this vulnerability is the function array_index_nospec of the component ipv4. The manipulation of the argument icmp_pointers[] leads to privilege escalation. This vulnerability is documented as CVE-2026-46037. The attack requires being on the local network. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-46035 | Linux Kernel up to 6.18.26/7.0.3/7.1-rc1 alloc_frozen_pages_nolock stack-based overflow

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.18.26/7.0.3/7.1-rc1. Affected is the function alloc_frozen_pages_nolock. Executing a manipulation can lead to stack-based buffer overflow. This vulnerability is registered as CVE-2026-46035. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-46092 | Linux Kernel up to 4.19.266 wifi pci_upstream_bridge denial of service

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as critical has been found in Linux Kernel. This impacts the function pci_upstream_bridge of the component wifi. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2026-46092. The attack must originate from the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-46033 | Linux Kernel up to 7.1-rc1 crypto crypto_authenc_esn_setauthsize out-of-bounds

VulDB Recent Entries
1 month 1 week ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3/7.1-rc1. This affects the function crypto_authenc_esn_setauthsize of the component crypto. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-46033. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-46088 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 ALSA strnlen infinite loop

VulDB Recent Entries
1 month 1 week ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. The impacted element is the function strnlen of the component ALSA. This manipulation causes infinite loop. This vulnerability is tracked as CVE-2026-46088. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-46084 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 RDMA mana_ib_destroy_qp_rss privilege escalation

VulDB Recent Entries
1 month 1 week ago
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. The affected element is the function mana_ib_destroy_qp_rss of the component RDMA. The manipulation results in privilege escalation. This vulnerability is identified as CVE-2026-46084. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2026-46083 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 cleanup allocation of resources

VulDB Recent Entries
1 month 1 week ago
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. Impacted is the function cleanup. The manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-46083. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-46079 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 rbd add_single_major device_add_disk null pointer dereference

VulDB Recent Entries
1 month 1 week ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. This issue affects the function device_add_disk of the file /sys/bus/rbd/add_single_major of the component rbd. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2026-46079. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-46076 | Linux Kernel up to 6.12.85/6.18.26/7.0.3 nSVM nested_svm_l2_tlb_flush_enabled privilege escalation

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in Linux Kernel up to 6.12.85/6.18.26/7.0.3. It has been rated as critical. This vulnerability affects the function nested_svm_l2_tlb_flush_enabled of the component nSVM. Performing a manipulation results in privilege escalation. This vulnerability was named CVE-2026-46076. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

Managed ad