flare-learning-hub

FLARE Learning Hub The FLARE Learning Hub freely distributes quality reverse engineering and malware analysis educational content from the FLARE team. The FLARE Learning Hub modules are hosted as web-published Google Docs, which are linked in the respective descriptions below. This repository...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

CVE-2026-33331

CVE-2026-33331 — Stored XSS in oRPC OpenAPI Reference Plugin Proof-of-concept lab for stored XSS in orpc's OpenAPI documentation generation Purpose oRPC builds API docs pages from an OpenAPI spec. Before v1.13.9 it dumped the spec directly into a tag using JSON.stringify with no HTML encoding. An...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1758293394)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758293394 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.2:CLSA-2025:1759784438)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1759784438 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8.6 [CIQ] Security Update: varnish / varnish-devel / varnish-docs (ciqsa-2026_0273)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260273 advisory. This advisory aggregates security fixes for the varnish SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description...

Rocky Linux 9.4 [CIQ] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ciqsa-2026_0583)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260583 advisory. This advisory aggregates security fixes for the tomcat SRPM in CIQ LTS 9.4. It addresses 2 CVEs: CVE-2025-24813, CVE-2024-50379. Tenable has extracted th...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2025:1765379145)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765379145 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1564)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261564 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 39 CVEs: CVE-2026-14673, CVE-2026-6477, CVE-2026-14664,...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1773330257)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773330257 advisory. - Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc (ALMALINUX9.6:CLSA-2026:1774017701)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774017701 advisory. - Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.2:CLSA-2026:1789647110)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789647110 advisory. - Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. CVE-2026-42504 Note that Nessus...

Rocky Linux 8.6 [CIQ] Security Update: nodejs-debuginfo / nodejs-debugsource / nodejs-devel / nodejs-docs / etc Multiple Vulnerabilities (ciqsa-2026_0816)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260816 advisory. This advisory aggregates security fixes for the nodejs SRPM in CIQ LTS 8.6. It addresses 25 CVEs: CVE-2020-8174, CVE-2021-35065, CVE-2021-44531,...

Rocky Linux 9.2 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1566)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261566 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.2. It addresses 54 CVEs: CVE-2026-14673, CVE-2026-6477, CVE-2024-10976,...

Rocky Linux 9.6 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ciqsa-2026_1411)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261411 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 9.6. It addresses 37 CVEs: CVE-2025-61729, CVE-2025-58183, CVE-2023-39323,...

Rocky Linux 8.6 [CIQ] Security Update: golang / golang-bin / golang-docs / golang-misc / golang-src / etc Multiple Vulnerabilities (ciqsa-2026_1004)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261004 advisory. This advisory aggregates security fixes for the golang SRPM in CIQ LTS 8.6. It addresses 5 CVEs: CVE-2024-34155, CVE-2024-34156, CVE-2024-34158,...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1783955624)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783955624 advisory. - x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1555)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261555 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 26 CVEs: CVE-2026-6477, CVE-2026-14664, CVE-2025-12817,...

Rocky Linux 9.6 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ciqsa-2026_1565)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261565 advisory. This advisory aggregates security fixes for the postgresql SRPM in CIQ LTS 9.6. It addresses 37 CVEs: CVE-2026-14673, CVE-2026-6477, CVE-2026-14664,...