Linux Distros Unpatched Vulnerability : CVE-2026-97959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsroute: free emptied bucket on filter move route4change can move an existing filter to a different top-level bucket: route4setparms recomputes the...

UBUNTU-CVE-2026-97988

In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB transitions When VIRTIOFACCESSPLATFORM changes, cached vring pointers and IOTLB metadata are interpreted in a different address space. Keeping them across the transition can leave stale rin...

CVE-2026-97973

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

UBUNTU-CVE-2026-97953

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descriptor availability check for TSO traffic stmmactsoxmit estimates the number of free TX descriptors required by a TSO skb as: skb-len - protohdrlen / TSOMAXBUFFSIZE + 1 which assumes the payload is split...

UBUNTU-CVE-2026-97982

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

Linux Distros Unpatched Vulnerability : CVE-2026-97615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: use option bits for CFM/MRP frame handlers CFM and MRP register a global brframetype whose hlistnode is linked into the per-bridge frametypelist wh...

Linux Distros Unpatched Vulnerability : CVE-2026-98013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: fqpie: clamp quantum in change path fqpiechange accepts any quantum value from userspace, including 1. With a crafted size table qdiscpktlen reaches ...

Linux Distros Unpatched Vulnerability : CVE-2026-98014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: E-Switch, prevent mclist repopulation during vport disable In mlx5eswvportdisable, move eswapplyvportrxmode ahead of eswvportchangehandlelocked so...

Linux Distros Unpatched Vulnerability : CVE-2026-98022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap txqueuelen at S16MAX to prevent oversized ring allocations Several subsystems allocate ring buffers sized by dev-txqueuelen with no upper bound. An...

CVE-2026-98027

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size mv88e6xxxgetrxnfc uses rxnfc-rulecnt as the write index while dumping the policy IDR, clobbering the input value before it has been looked at. That input...

UBUNTU-CVE-2026-98068

In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let rdsconnshutdown consume a concurrent drop rdsconnshutdown finishes by moving the path from RDSCONNDISCONNECTING to RDSCONNDOWN, and also accepts RDSCONNERROR as the starting state of that final transition, so...

matt.net

Matt.Net NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ Matt Lewis によって開発、matt dot lewis at nccgroup dot com http://www.github.com/nccgroup/matt.net AGPL のもとで公開されています。詳細については LICENSE を参照してください。 概要 Matt.Net は、Microsoft の CAT.NET コード監査ツールのシンプルな GUI ラッパーです。 指定されたフォルダ内の .NET...

ncccodenavi

ncccodenavi NCC Code Navi は、コードレビュアーのためのテキストビューア／検索ツールです NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ 開発者: Ollie Whitehouse、ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi AGPL のもとで公開。詳細は LICENSE を参照 ドキュメント...

agentic-workflow-injection

エージェント型ワークフローインジェクション: フィクスチャとカバレッジ比較 CVE-2026-44246 nnU-Net、エージェント型ワークフローインジェクション、CVSS 7.2、CWE-1427 として公開されたバグ分類に対する、再現可能な脆弱版/修正版フィクスチャと、それらに対する3つの検出器の実測出力。...

AgrusScanner

Agrus Scanner Network reconnaissance tool with deep AI/ML service detection. Scans your network to discover hosts, open ports, and identifies AI services running across your infrastructure. Built for security teams, IT admins, and researchers who need visibility into shadow AI, rogue LLM...

dotNIET

.NIET .NIET は IDA Pro プラグインです。その目的は、.NET Native でコンパイルされたバイナリが実行時に解決する欠落シンボル（通常は数千個）をインポートすることです。これらのシンボルは SharedLibrary.dll 内に存在し、この DLL からはエクスポートされません。 .NIET は、以下のプラットフォームで python 3.8 を使用し、IDA Pro 7.5 でテストされています: Windows Linux このプラグインは現在、以下の .NET Native フレームワーク バージョンをサポートしています: 1.3 1.6 1.7 2.2...

seal-security-nuget-demo-net7

ブラウザ + CLI デモ NuGet/C — .NET 7 エディション なぜ .NET 7 フォークなのか? これは、標準的な seal-security-nuget-demo（net9.0 をターゲットにしている）を再ターゲットしたフォークです。エクスプロイトのストーリー、コントローラー、シールドパッケージのリストは同一です — TargetFramework のみが異なります。 これが存在する理由は、ほとんどのエンタープライズ顧客が要求に応じて最新の .NET SDK に移行できないためです。.NET 7 は 2024 年 5 月 14 日にサポート終了に達しました...

ysonet

YSoNet is a fork of the original YSoSerial.Net, currently maintained by @irsdl. Sites: ysonet.net or ysonet.com both open this repo. A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. What is YSoNet YSoNet previously known as ysoserial.net is a...

-cve-2021-45232

近日、https://Hellofhackers.com で完全な記事を公開予定です...

RLSA-2026:70640 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...