CVE-2026-74637

A flaw was found in the Linux kernel's perf subsystem. A local attacker could exploit a use-after-free vulnerability when a perf event group's sibling is detached but remains active, and its pointer to the group leader is not properly updated. This improper handling can lead to a system crash,...

CVE-2026-74636

A flaw was found in the Linux kernel. A race condition exists between the updateeventfields and eventdefinefields functions within the tracing subsystem. A local user, by loading specific modules, could exploit this unprotected access to kernel fields. This could lead to a kernel panic, resulting...

PhantomFS

File Falsi. Sicurezza Reale. File system virtuale honeypot per Windows — attira gli aggressori in una directory che sembra reale, poi coglili in flagrante. Cos'è PhantomFS? PhantomFS utilizza il Windows Projected File System ProjFS per mostrare una directory virtuale piena di file esca convincent...

EUVD-2026-64776

Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byte slice to a string as it is stored, deliberately dropping...

CVE-2026-10618

Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byte slice to a string as it is stored, deliberately dropping...

WELA

WELA Analizzatore del registro eventi di Windows ゑ羅 Uno strumento per il controllo delle impostazioni del registro eventi di Windows. Creato da Yamato Security — assicurati di registrare effettivamente gli eventi che contano per la DFIR. 📖 Leggi la documentazione → Disponibile in 15 lingue —...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: The crash in iclupdatetopdownevent has been fixed. The perffuzzer detected a hard-lockup crash on a RaptorLake machine: Oops: General Protection Fault, possibly at address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PI...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Fixed a sleeping function called from an invalid context in the RT kernel. When setting bootparams="traceevent=initcall:initcallstart tpprintk=1" in the cmdline, the outputprintk function was called, and spinlockirqsave...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: Added guards for HIDCLAIMEDINPUT in raw event callbacks; these guards were previously missing. In commit 2ff5baa9b527 “HID: appleir: Fix potential NULL dereference at raw event handling”, we addressed the issue where raw eve...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: MIPS: cevt-r4k – Do not call getc0compareint if the timer irq is installed. This prevents a warning: 0.118053 BUG: A sleeping function was called from an invalid context at kernel/locking/mutex.c:283. The issue was caused by the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevents deadlock by moving j1939skerrqueue This commit addresses a deadlock situation that can occur in certain scenarios, such as when running data TP/ETP transfers and subscribing to the error queue while...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/srpt: Do not register the event handler until the srpt device is fully set up. In rare cases, KASAN reports a use-after-free error in the srptrefreshport function. This appears to occur because the event handler is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/cma: Fixed a crash in the cmaneteventworkhandler function. The struct rdmacmid contains a member “struct workstruct network”, which is reused to queue cmaneteventworkhandlers onto the cmawq. The crash1 can occur if more...

CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite

3. CVE-2026-9999 – Event-Injection in Serverless-Funktionen Path Traversal → Code-Überschreibung Überblick Eine Serverless-Plattform, die Objektspeicher-Events verarbeitet, bereinigt das Feld object.key nicht, sodass ein Angreifer den Quellcode der Funktion per Path Traversal überschreiben kann...

logparser

Logparser Logparser fornisce un toolkit di machine learning e benchmark per il parsing automatico dei log, un passaggio fondamentale per l'analisi strutturata dei log. Applicando logparser, gli utenti possono estrarre automaticamente modelli di eventi da log non strutturati e convertire i messagg...

github-logs

GitHub Logs Estraendo approfondimenti OSINT da 15TB di GitHub Event Logs Abbiamo sviluppato 3 workflow Trickest che hanno elaborato e arricchito l'intero dataset dei GitHub Event Logs, fornendoci alcune preziose informazioni. Ora, l'intera community può beneficiare di questi risultati. Sapevi che...

plaso

Plaso Plaso Langar Að Safna Öllu - super timeline di tutte le cose Plaso Plaso Langar Að Safna Öllu, o super timeline di tutte le cose , è un motore basato su Python utilizzato da diversi strumenti per la creazione automatica di timeline. Il comportamento predefinito di Plaso è creare super...

ALEAPP

Parser di log, eventi e protobuf di Android Se vuoi contribuire, contattami qui: https://abrignoni.github.io Post del blog qui: https://leapps.org/blog Requisiti Python 3.10 o superiore Dipendenze Le dipendenze per il tuo ambiente Python sono elencate in requirements.txt. Installale usando il...

ossem-power-up

OSSEM A tool to assess data quality, built on top of the awesome OSSEM project. Mission Answer the question: I want to start hunting ATT&CK techniques, what log sources and events are more suitable? Create transparency on the strengths and weaknesses of your log sources Provide an easy way to...

CVE-2026-74793

justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling...