Aggregator

MazeSec靶机 Hyperjail WP复盘

先知技术社区
1 week 2 days ago
Hyperjail 靶机考点为无认证 libvirt 远程管控，依托存储池任意目录挂载实现公钥注入拿用户权限，篡改 doas 配置完成本地提权，再通过挂载 QCOW2 磁盘镜像打通虚拟机内外权限。

ISCC 2026 移动安全题解

先知技术社区
1 week 2 days ago
本文为 ISCC 2026 移动安全赛题的全套题解，涵盖五道 Android 逆向题目，每道题均从 APK 结构分析入手，逐步拆解 Java 层逻辑、native 层校验链及密码学方案，并给出完整 exp。

INC

Dark Feed IO
1 week 2 days ago

You must login to view this content

cohenido

CVE-2026-46002 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 fs/inode.c ext2_iget information disclosure

Vuldb Updates
1 week 2 days ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. This impacts the function ext2_iget of the file fs/inode.c. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-46002. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-46003 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 memory allocation

Vuldb Updates
1 week 2 days ago
A vulnerability was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 and classified as critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to uncontrolled memory allocation. This vulnerability is tracked as CVE-2026-46003. The attack is only possible within the local network. No exploit exists. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-46005 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 xfs xfs_alloc_buftarg memory leak

Vuldb Updates
1 week 2 days ago
A vulnerability was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. It has been rated as critical. This issue affects the function xfs_alloc_buftarg of the component xfs. This manipulation causes memory leak. This vulnerability is registered as CVE-2026-46005. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-45997 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 scsi put_disk privilege escalation

Vuldb Updates
1 week 2 days ago
A vulnerability was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. It has been rated as critical. This affects the function put_disk of the component scsi. This manipulation causes privilege escalation. This vulnerability is tracked as CVE-2026-45997. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2026-46006 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 nouveau_gem_pushbuf_reloc_apply data authenticity

Vuldb Updates
1 week 2 days ago
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. Impacted is the function nouveau_gem_pushbuf_reloc_apply. Executing a manipulation can lead to insufficient verification of data authenticity. This vulnerability is registered as CVE-2026-46006. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-46007 | Linux Kernel up to 6.12.87/6.18.29/7.0.3 hwmon buffer overflow

Vuldb Updates
1 week 2 days ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.87/6.18.29/7.0.3. The affected element is an unknown function of the component hwmon. The manipulation leads to buffer overflow. This vulnerability is documented as CVE-2026-46007. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-45999 | Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.3 z_erofs_lz4_handle_overlap integer overflow

Vuldb Updates
1 week 2 days ago
A vulnerability was found in Linux Kernel up to 6.6.139/6.12.87/6.18.29/7.0.3. It has been rated as critical. This affects the function z_erofs_lz4_handle_overlap. The manipulation leads to integer overflow. This vulnerability is referenced as CVE-2026-45999. The attack needs to be initiated within the local network. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-46001 | Linux Kernel up to 6.12.85/6.18.26/7.0.3 pt5161l_read_block_data buffer overflow

Vuldb Updates
1 week 2 days ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.85/6.18.26/7.0.3. This impacts the function pt5161l_read_block_data. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026-46001. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-46004 | Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3 Caiaq Driver setup_card use after free (Nessus ID 321065)

Vuldb Updates
1 week 2 days ago
A vulnerability was found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3. It has been classified as critical. This affects the function setup_card of the component Caiaq Driver. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-46004. The attack must be carried out from within the local network. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio

Cyber Security News
1 week 2 days ago

Las Vegas, USA / Nevada, June 16th, 2026, CyberNewswire Aembit on Tuesday announced support for Copilot Studio, extending its identity and access management capabilities to Microsoft’s enterprise AI agent platform. The integration, unveiled at Identiverse 2026, gives security teams the tools to manage what Copilot Studio agents can access, under what conditions, and with a […]

The post Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio appeared first on Cyber Security News.

Cybernewswire

Managed ad