vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

slot2

slot2 slot2: a two-stage UEFI GRUB2 bootkit that persists a pre-OS networked implant on Amazon Linux 2023 on AWS EC2 UEFI x8664. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Summary slot2 is a bootkit for Amazon Linux 2023 on EC2. The AWS EC2 UEFI firmware load...

Important: compat-rpm-411

Issue Overview: A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a % macro construct causes rpm to execute an attacker-controlled shell command via popen while relocating the source file list. This allows arbitrary comman...

Medium: python-botocore

Issue Overview: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if...

Medium: gstreamer1-plugins-base

Issue Overview: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

Amazon Linux 2 : rpm (ALASMOCK2-2026-006)

The version of rpm installed on the remote host is prior to 4.14.3-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MOCK2-2026-006 advisory. A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared...

Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3458)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3458 advisory. modvhostalias 1 byte stack buffer overwrite after CVE-2026-63292 CVE-2026-109163 Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Servers...

Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-3457)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3457 advisory. Node js security advisory: Permission Model filesystem over-grant via wildcard radix lookup CVE-2026-106071 undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0...

Amazon Linux 2 : httpd (ALAS-2026-4114)

The version of httpd installed on the remote host is prior to 2.4.71-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4114 advisory. modmd NULL pointer dereference leads to child process crash CVE-2026-106023 modvhostalias 1 byte stack buffer overwrite aft...

Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-3407)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3407 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-3411)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3411 advisory. Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-3406)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3406 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : aws-workload-credentials-provider (ALAS2023-2026-3375)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3375 advisory. rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bitstringflags in src/der.rs. The input guard fails to reject a named-bit BIT...

Amazon Linux 2 : docker (ALASDOCKER-2026-162)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-162 advisory. eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic hardlink...

Amazon Linux 2 : docker (ALASECS-2026-157)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-157 advisory. eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic hardlink crash...

Important: compat-rpm-411

Issue Overview: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious...

Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-3408)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3408 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : polkit, polkit-devel, polkit-libs (ALAS2023-2026-3379)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3379 advisory. A flaw was found in polkit. A regression in the fix for CVE-2026-4897 introduced a stack buffer underflow out-of-bounds read in the readcookie function of the polkit-agent-helper-1 setuid helper. When ...