Aggregator

JDK 21 的 Foreign Function & Memory API 位于 java.lang.foreign 包。它允许 Java 代码直接分配堆外内存、查找 native 符号并发起 downcall。MemorySegment 在 Java 侧带有地址、长度、访问状态和所属 Arena，关闭 Arena 后继续通过 Java 访问该段会被运行时拒绝。

本文完整复盘 Hack The Box 靶机 FireFlow 的渗透过程，展示一条从 AI 工作流平台延伸至 Kubernetes 宿主机的多阶段攻击链。通过服务枚举与 OpenAPI 信息泄露，确认目标运行 Langflow 1.8.2，随后利用 CVE-2026-33017，在未认证状态下构造包含 Python Interpreter 组件的恶意 Flow，实现远程代码执行并获取 www-d

JDWP（Java Debug Wire Protocol）是 JVM 调试器与被调试进程之间的通信协议，通常通过 -agentlib:jdwp 启用。它不是 Web 入口，也不是业务框架组件；一旦以服务端模式监听 TCP 端口，连接方进入的是 JVM 调试面，而不是应用认证面。协议握手阶段没有密码、令牌、证书或挑战响应，网络可达就能开始调试会话。

本文复现 ATHENA CTF 中三道 Pwn 题目的解题过程，涵盖 tcache poisoning 修改全局元数据、未初始化堆内存读取 flag 及 UAF 构造任意地址读。核心利用 safe-linking 恢复堆地址并动态解析 libc 符号获取栈指针，最终从栈内存中提取 flag。

牵扯了很多新题型，ai和isc主要是

WP Forms Connector 是一个 Connect Contact Form 7 和外部 API 的 WordPress 插件。2026 年 6 月 24 日，Wordfence 公布了 CVE-2026-9179（CVSS 7.5），一个不需要登录就能打的 SQL 注入。 看了一圈代码，发现这个洞有点意思——它不是那种"作者完全没做安全"的低级错误，而是犯了两个恰好互补但都无效的失误。

Fastjson 1.2.83 file: 协议不出网利用分析

本文记录了一次针对高校教务系统的跨场景安全测试过程。在PC端发现邮箱修改无验证漏洞后，通过将攻击面拓展至移动端Angular SPA应用，逆向webpack打包产物提取了150+个REST API端点及签名算法，并发现服务端完全不校验API请求签名。在此基础上构造了完整的账号接管攻击链：移动端签名校验缺失 → 无验证修改绑定邮箱 → PC端密码重置 → 账号劫持。同期通过遍历课程学生查询接口的le

A vulnerability categorized as critical has been discovered in Microsoft Windows. This vulnerability affects unknown code of the component Hyper-V. Executing a manipulation can lead to privilege escalation. This vulnerability is tracked as CVE-2022-41094. The attack can be launched remotely. No exploit exists. A patch should be applied to remediate this issue.

A vulnerability categorized as critical has been discovered in Microsoft Windows. This vulnerability affects unknown code of the component Advanced Local Procedure Call. Executing a manipulation can lead to race condition. This vulnerability is tracked as CVE-2022-41093. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability was found in Microsoft Windows up to Server 2022 Datacenter Azure Edition. It has been rated as critical. This affects an unknown part of the component Win32k. Performing a manipulation results in privilege escalation. This vulnerability is identified as CVE-2022-41092. The attack can be initiated remotely. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.

A vulnerability marked as problematic has been reported in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. Affected by this vulnerability is an unknown functionality of the component Optimizer. Performing a manipulation results in denial of service. This vulnerability is reported as CVE-2026-22017. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability classified as problematic has been found in Oracle MySQL Server up to 8.0.45. This affects an unknown part of the component Optimizer. The manipulation leads to denial of service. This vulnerability is traded as CVE-2026-34267. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability labeled as critical has been found in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. Impacted is an unknown function of the component Information Schema. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-22015. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. This impacts an unknown function of the component Optimizer. This manipulation causes denial of service. This vulnerability is registered as CVE-2026-22009. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. This affects an unknown function of the component Optimizer. The manipulation results in denial of service. This vulnerability is cataloged as CVE-2026-22005. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0 and classified as problematic. This issue affects some unknown processing of the component Optimizer. Such manipulation leads to denial of service. This vulnerability is referenced as CVE-2026-22002. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. It has been rated as problematic. The impacted element is an unknown function of the component InnoDB. The manipulation leads to denial of service. This vulnerability is listed as CVE-2026-22004. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability described as critical has been identified in Oracle MySQL Server up to 8.0.45/8.4.8/9.6.0. The impacted element is an unknown function of the component Information Schema. Such manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-22001. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in litestar-org Litestar up to 2.19.x and classified as problematic. Impacted is an unknown function of the component CSRF protection. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-48060. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.