asclepius

Asclepius Asclepius फ़ाइलों को पुनर्स्थापित करके और उनकी पुनर्प्राप्ति क्षमता का सक्रिय रूप से परीक्षण करके बैकअप अखंडता को सत्यापित करता है। मेटाडेटा पर भरोसा करने के बजाय, यह वास्तविक फ़ाइल प्रारूपों दस्तावेज़, चित्र, वीडियो, संग्रह, ईमेल को पार्स करने का प्रयास करता है ताकि यह पुष्टि हो सके कि...

tarian

Tarian अपने Kubernetes पर चल रहे एप्लिकेशन को दुर्भावनापूर्ण हमलों से बचाएं, अपनी विश्वसनीय प्रक्रियाओं और विश्वसनीय फ़ाइल हस्ताक्षरों को पूर्व-पंजीकृत करके। Tarian अज्ञात प्रक्रियाओं और पंजीकृत फ़ाइलों में बदलाव का पता लगाएगा, फिर अलर्ट भेजेगा और स्वचालित कार्रवाई करेगा। अपने K8s वातावरण को...

fim-ebpf

FIM-eBPF: eBPF के साथ फ़ाइल अखंडता निगरानी Linux पर फ़ाइल निर्माण और संशोधन घटनाओं की निगरानी के लिए एक हल्का eBPF प्रोग्राम। यह उपकरण कर्नेल से सीधे फ़ाइल संचालन का पता लगाने के लिए eBPF एक्सटेंडेड बर्कले पैकेट फ़िल्टर का उपयोग करता है, जो न्यूनतम ओवरहेड के साथ उच्च प्रदर्शन निगरानी प्रदान करता...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

CVE-2026-31431-CopyFail-Lab

CVE-2026-31431 "Copy Fail" — مختبر تصعيد الامتيازات المحلية في نواة لينكس نظرة عامة يوثّق هذا المستودع تحقيقًا مخبريًا كاملاً حول CVE-2026-31431 Copy Fail ، وهي ثغرة تصعيد امتيازات محلية LPE عالية الخطورة في وحدة algifaead المشفّرة في نواة لينكس، تم الكشف عنها في 29 أبريل 2026. درجة CVSS: 7.8 عال...

cve_2023_38831_scanner

ماسح CVE-2023-38831 نظرة عامة ماسح CVE-2023-38831 هو أداة متقدمة في مجال الأمن السيبراني مصممة لكشف وتحليل وجود ثغرة CVE-2023-38831 في تثبيتات WinRAR. يطبّق هذا المشروع نهجًا متعدد الطبقات لكشف الثغرات، ويتضمن فحوصات سلامة الملفات، ومسح ذاكرة العمليات، وتحليل حركة مرور الشبكة، والتنفيذ في بيئة...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)

The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...

CVE-2026-74596

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...

EUVD-2026-64533

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-63310

NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...

CVE-2026-49392

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile and DB::searchFile in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row filters. On non-Windows systems,...

EUVD-2026-62577

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile and DB::searchFile in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row filters. On non-Windows systems,...

CVE-2026-49392 Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile and DB::searchFile in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row filters. On non-Windows systems,...

CVE-2026-49392

Wazuh (free and open source threat prevention, detection, and response platform) is affected by a local SQL injection in its File Integrity Monitoring (FIM) database layer. The vulnerable functions DB::getFile() and DB::searchFile() in src/syscheckd/src/db/src/file.cpp concatenate a monitored fil...

CVE-2026-73509

OpenList a file list program that supports multiple storage. Prior to 4.2.4, the authenticated /api/fs/batchrename handler in server/handles/fsbatch.go authorizes only the source directory produced by user.JoinPathreq.SrcDir and validates renameObject.NewName with checkRelativePath, but does not...

CVE-2026-73509 OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

OpenList a file list program that supports multiple storage. Prior to 4.2.4, the authenticated /api/fs/batchrename handler in server/handles/fsbatch.go authorizes only the source directory produced by user.JoinPathreq.SrcDir and validates renameObject.NewName with checkRelativePath, but does not...

CVE-2026-73509

OpenList CVE-2026-73509 affects the batch_rename path: before 4.2.4, the /api/fs/batch_rename handler validates only the destination and a subset of the source directory, but does not validate attacker-controlled renameObject.SrcName. An authenticated user with rename permission can inject traver...

Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.4.1 is now available. See the documentation for bug fix information:...