NXcrypt

NXcrypt NXcrypt는 Hadi Meneh4d3s가 Python으로 작성한 다형성 'Python 백도어' 크립터입니다. 출력물은 완전히 탐지되지 않습니다. NXcrypt는 멀티스레딩 시스템을 통해 일반 파일에 악성 Python 파일을 주입할 수 있습니다. 슈퍼유저 권한으로 실행하세요. NXcrypt 출력물은 완전히 탐지되지 않습니다. 백도어링 모듈: 암호화 모듈 사용법 : sudo ./NXcrypt.py --file=backdoor.py --output=outputbackdoor.py backdoor.py를 암호화하고 ...

Invoke-CVE-2022-22965-SafeCheck

Invoke-CVE-2022-22965-SafeCheck colincowie의 원본 Python 버전 CVE-2022-22965의 PowerShell 포트. 설치: iexiwr https://raw.githubusercontent.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck/main/Invoke-CVE202222965-SafeCheck.ps1 -UseBasicParsing.content 사용법: Injects file 'CVE202222965exploited.txt' on the...

CVE-2026-22038

CVE-2026-22038 — AutoGPT Stagehand 模块以明文形式将 API 密钥记录到日志中 CVE ID： CVE-2026-22038 产品： AutoGPT 平台（Stagehand 集成） 受影响版本： 所有版本，包括 autogpt-platform-beta-v0.6.45 修复版本： autogpt-platform-beta-v0.6.46 漏洞类型： CWE-532 — 将敏感信息插入日志文件 严重性： 高 报告人： Panuganti Siva Aditya @sivaadityacoder 报告日期： 2025 年 12 月 19 日 GitHu...

SUSE SLES15: libpython3_12-1_0 / python312 / python312-base / python312-curses / etc (SUSE-SU-2026:4534-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4534-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-0864...

SUSE-SU-2026:4534-1 Security update for python312

This update for python312 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser...

PT-2026-104770

DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the backup restoration mechanism, which fai...

Rocky Linux 8 [CIQ] Security Update: tar / tar-debuginfo / tar-debugsource Multiple Vulnerabilities (crlsa-2026_70390)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202670390 advisory. tar: Tar path traversal CVE-2025-45582 tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rena...

Rocky Linux 9 [CIQ] Security Update: tar / tar-debuginfo / tar-debugsource Multiple Vulnerabilities (crlsa-2026_61581)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661581 advisory. tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape...

CentOS Linux 8 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc (CENTOS-STREAM8:CLSA-2026:1788356018)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1788356018 advisory. - When using the configparser module to write configuration files containing multi-line text values with carriage return characters \r th...

Rocky Linux 10.2 [CIQ] Security Update: tar / tar-debuginfo / tar-debugsource Multiple Vulnerabilities (crlsa-2026_61586)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661586 advisory. tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path esca...

CentOS Linux 8 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1787647735)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1787647735 advisory. - When using the configparser module to write configuration files containing multi-line text values with carriage return characte...

CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

CVE-2026-6103

The php language environment is vulnerable to an integer overflow in the phar_tar_number() function. The function fails to perform an overflow check when parsing the 11-octal-digit size field of a TAR header into a uint32_t. Consequently, sizes exceeding 0xFFFFFFFF silently wrap, causing the pars...

RLSA-2026:70390 Moderate: tar security, bug fix, and enhancement update

The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: Tar path traversal CVE-2025-45582 tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path...

tar security, bug fix, and enhancement update

An update is available for tar. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNU tar program can save multiple files in an archive and restore files from ...

RockyLinux 8 : tar (RLSA-2026:70390)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70390 advisory. tar: Tar path traversal CVE-2025-45582 tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X'...

Oracle Linux 8 : tar (ELSA-2026-70390)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-70390 advisory. - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also...

tar security, bug fix, and enhancement update

2:1.30-13 - Backport upstream fix for CVE-2026-5704 file injection hidden from -t - Fix --one-top-level with absolute path broken by the CVE-2025-45582 fix Also fixes CVE-2026-18508 escape from --one-top-level via hardlinks. - Upstream fix for build with libacl 2.4.0 - Backport upstream patches f...

AlmaLinux 8 : tar (ALSA-2026:70390)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:70390 advisory. tar: Tar path traversal CVE-2025-45582 tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X'...