Aggregator

A vulnerability identified as problematic has been detected in Linux Kernel up to 7.1.4. The affected element is the function pefile_digest_pe_contents of the file crypto/asymmetric_keys/verify_pefile.c of the component asymmetric_keys. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-64544. An attack has to be approached locally. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Fission up to 1.24.x. The impacted element is the function HTTPTriggerSpec.Validate of the component Direct Kubernetes REST API. Performing a manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is known as CVE-2026-50569. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in IBM WebSphere Application Server up to 26.0.0.7 and classified as problematic. This affects an unknown function. Such manipulation leads to denial of service. This vulnerability is documented as CVE-2026-15057. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as problematic has been found in IBM WebSphere Application Server and WebSphere Application Server Liberty 9.0/8.5/17.0.0.3/26.0.0.7. This vulnerability affects unknown code of the component HTTP Channel. Performing a manipulation results in allocation of resources. This vulnerability is identified as CVE-2026-14981. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as critical, was found in IBM WebSphere Application Server up to 26.0.0.8. The affected element is an unknown function. The manipulation results in code injection. This vulnerability is cataloged as CVE-2026-14976. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in IBM Aspera Faspex up to 5.0.15.4. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to manage user sessions. This vulnerability is traded as CVE-2026-14996. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in IBM WebSphere Application Server 8.5/9.0 and classified as critical. The impacted element is an unknown function. This manipulation causes deserialization. This vulnerability is registered as CVE-2026-14974. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in IBM Aspera Desktop App up to 1.0.19. Affected by this issue is some unknown functionality. The manipulation results in path traversal. This vulnerability is known as CVE-2026-14973. Attacking locally is a requirement. No exploit is available.

CubePilot, an Australian firm that designs flight controllers for drones (UAVs), announced a severe operational disruption caused by a DNS hijacking attack. [...]

MISCCatFlag直接type flag.txt即可如烟大帝独断万古Step 1: 观察异常 Unicode 字符解压后查看 novel.txt，正文没有直接出现 flag。但检查字节可以看到大量形如 EF B8 xx 的序列，对应 Unicode 变体选择符 U+FE00 到 U+FE0F。这些字符通常不可见或弱可见，刚好对应题面“名讳也是尔等能直呼的？”的暗示：真正的信息没有直接显示在正文

Misc八卦图片中共有 64 个格子，每个格子是一个六爻卦。根据《易经》卦象的常见读法，爻应从下往上读：实线记为 1断线记为 0每个卦得到 6 bit64 个卦共 64 * 6 = 384 bit384 / 8 = 48 bytes完整解码脚本如下：运行结果：寻找白塔线索核验白塔正式名称：合川俗称白塔的建筑为文峰塔（振兴塔），通用正式标准名文峰塔，拼音小写无空格：wenfengta山城遗址（钓鱼城

微信小程序加密通信协议逆向分析实录——SM2/SM3/SM4 国密算法套件破解

Craft Commerce 是 Craft CMS 的电商插件。后台订单管理里有个"可购买商品列表"接口，前端表格支持按列排序，参数叫 sort，格式是 列名|方向（比如 title|asc）。后端拿到这个字符串，explode('|', $sort) 拆成左右两半，左半截直接塞给 Yii2 Query Builder 的 orderBy()。 问题在 Yii2 的 orderBy() ——它假

本文以 DIR-605L 路由器为例，详细记录了 CNVD-2026-28535 命令注入漏洞的挖掘与复现过程。重点分享了如何通过分析 apmib.so、编写 C 代码劫持 apmib_init 等配置函数并配合 LD_PRELOAD，解决 MIPS 架构下 QEMU 模拟固件时的环境报错问题，最终成功完成漏洞的动态调试与利用验证。

本文复现了 2026 黄鹤杯 CTF 竞赛中 AI、Misc、Pwn、Re、Web 及 Crypto 方向的题目解法。文章详细解析了 Unicode 隐写、堆 Stale Cap 越界、Spring 路径穿越及 RSA/Coppersmith 等关键技术点，并提供了完整的 Python 与 Sage

文章分析了JavaMix这道CTF Web题的预期解和非预期解，知识点包括SSRF重定向、hutools二次反序列化、Rasp新线程逃逸、匿名函数在反序列化中的利用、动态代理多接口下的特性等。

本文详细复现了 Fastjson 1.2.66 ~ 1.2.83 版本中的远程代码执行（RCE）漏洞（CVSS 9.8），涵盖 JDK 8、17、21、25 全版本。

黄鹤杯密码详解Broken Transcript每个 modulus 由 nextprime 生成，约为 2^60~2^61所以可以先用 CRT 精确还原 p 的高位，再用 Coppersmith 恢复缺失的低位。基本过程1.对每条 state=1 记录，由 y ≡ a·upper + b (mod m) 反解：upper ≡ (y − b) · a⁻¹ (mod m)12 个模数互不相同（均为素

本次渗透以 Windows AD 域控制器为目标，通过 Nmap 识别出完整域环境后，从 LDAP 匿名查询入手，发现用户 r.thompson 的自定义属性 cascadeLegacyPwd，Base64 解码获得其明文凭据。利用该账户枚举 SMB 共享，在 Data 分享中获取一份 VNC 注册表文件，结合源码级的 VNC DES 密钥逆向分析成功解密出 s.smith 的密码。随后凭借 s.

涵盖web、misc、reverse和crypto方向共计六道题目