Aggregator

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

CVE-2026-25243 (补丁绕过变种)

Misc八卦图片中共有 64 个格子，每个格子是一个六爻卦。根据《易经》卦象的常见读法，爻应从下往上读：实线记为 1断线记为 0每个卦得到 6 bit64 个卦共 64 * 6 = 384 bit384 / 8 = 48 bytes完整解码脚本如下：运行结果：寻找白塔线索核验白塔正式名称：合川俗称白塔的建筑为文峰塔（振兴塔），通用正式标准名文峰塔，拼音小写无空格：wenfengta山城遗址（钓鱼城

本文复现了 2026 黄鹤杯 CTF 竞赛中 AI、Misc、Pwn、Re、Web 及 Crypto 方向的题目解法。文章详细解析了 Unicode 隐写、堆 Stale Cap 越界、Spring 路径穿越及 RSA/Coppersmith 等关键技术点，并提供了完整的 Python 与 Sage

文章分析了JavaMix这道CTF Web题的预期解和非预期解，知识点包括SSRF重定向、hutools二次反序列化、Rasp新线程逃逸、匿名函数在反序列化中的利用、动态代理多接口下的特性等。

2026年07月30日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

CERT/CCから本件に関するアドバイザリが公表されました。

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.14.0. The affected element is the function nf_sk_lookup_slow_v4 of the component netfilter. The manipulation results in privilege escalation. This vulnerability is reported as CVE-2025-22021. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.22/6.13.10/6.14.1 and classified as critical. This issue affects the function PageTail of the component gup. Such manipulation leads to improper update of reference count. This vulnerability is listed as CVE-2025-22034. The attack must be carried out from within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.14.1. Affected by this vulnerability is the function to_nfit_bus_uuid of the component acpi. Performing a manipulation results in incorrect type conversion. This vulnerability is known as CVE-2025-22044. Access to the local network is required for this attack. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.12.22/6.13.10/6.14.1. Affected by this issue is the function block_read_full_folio of the component exfat. Executing a manipulation can lead to race condition. This vulnerability is handled as CVE-2025-22036. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability has been found in Linux Kernel up to 6.14.1 and classified as critical. The affected element is the function dl_stid of the component nfsd. Performing a manipulation results in improper update of reference count. This vulnerability is identified as CVE-2025-22025. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.1.133/6.6.86/6.12.22/6.13.10/6.14.1. It has been rated as problematic. Affected is the function num_subauth of the component ksmbd. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2025-22038. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.22/6.13.10/6.14.1. Affected by this issue is the function smb_check_perm_dacl of the component ksmbd. Performing a manipulation of the argument dacloffset results in null pointer dereference. This vulnerability is reported as CVE-2025-22039. The attacker must have access to the local network to execute the attack. No exploit exists. You should upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.1.133/6.6.86/6.12.22/6.13.10/6.14.1. This issue affects some unknown processing. The manipulation results in memory corruption. This vulnerability is known as CVE-2025-22042. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.86/6.12.22/6.13.10/6.14.1. Impacted is an unknown function. This manipulation causes memory corruption. This vulnerability is handled as CVE-2025-22043. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.12.22/6.13.10/6.14.1. The affected element is the function alloc_preauth_hash. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2025-22037. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.

Anthropic周四表示，该公司在测试的软件曾接入了互联网，并在自身不知情的情况下入侵了一些毫无防备的公司。此类独立事件共发生三起，最早可追溯至今年四月。这三家公司均已在周一接到了事件通知。在排查了