wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

CVE-2026-31431-CopyFail-Lab

CVE-2026-31431 "Copy Fail" — Linux Kernel LPE Lab Overview This repository documents a complete lab investigation of CVE-2026-31431 Copy Fail , a high-severity local privilege escalation LPE vulnerability in the Linux kernel's algifaead cryptographic module, disclosed on April 29, 2026. CVSS Scor...

CVE-2026-55480

OpenPrinting CUPS versions prior to 2.4.20 are vulnerable to a symlink TOCTOU (Time-of-Check to Time-of-Use) attack due to the copy_model() function in scheduler/ipp.c . The root cause is the creation of a predictable PPD tempfile path in an lp-group-writable directory without using O_EXCL or O_N...

CVE-2026-55480

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without OEXCL or ONOFOLLOW. Exploitation requires an...

asclepius

Asclepius Asclepius validates backup integrity by restoring files and actively testing their recoverability. Instead of trusting metadata, it attempts to parse real file formats documents, images, videos, archives, emails to confirm backups can actually be read and are safe to use. Installation g...

cve_2023_38831_scanner

CVE-2023-38831 Scanner Overview The CVE-2023-38831 Scanner is an advanced cybersecurity tool designed to detect and analyze the presence of the CVE-2023-38831 vulnerability in WinRAR installations. This project implements a multi-layered approach to vulnerability detection, incorporating file...

CVE-2026-92154

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic a...

CVE-2026-92154

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains a file size bounds bypass in Svc::FileUplink prior to version 4.2.0 . The vulnerability stems from an unsigned integer overflow during DATA packet validation , where the component uses wrapping U32 arith...

CVE-2026-92154 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic a...

CVE-2026-92154 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic a...

tarian

Tarian Protege tus aplicaciones ejecutándose en Kubernetes de ataques maliciosos pre-registrando tus procesos confiables y firmas de archivos confiables. Tarian detectará procesos desconocidos y cambios en los archivos registrados, luego enviará alertas y tomará una acción automatizada. ¡Protege ...

fim-ebpf

FIM-eBPF: File Integrity Monitoring with eBPF A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF Extended Berkeley Packet Filter to trace file operations directly from the kernel, providing high-performance monitoring with minimal...

Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update

An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.5.0 is now available. See the documentation for bug fix information:...

GHSA-5WP5-5229-5G6Q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

NLTK's package downloader in nltk/downloader.py does not verify file integrity after download and before extraction. The download flow at lines 789-825: 1. File is downloaded to a temp path via HTTP 2. os.replacetmpfilepath, filepath moves it to the final location line 799 3. Extraction begins vi...

SUSE CVE-2026-63310

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

AIDE 0.19.4

AIDE Advanced Intrusion Detection Environment is a free replacement for Tripwiretm. It generates a database that can be used to check the integrity of files on server. It uses regular expressions for determining which files get added to the database. You can use several message digest algorithms ...

Security Bulletin: Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components

Summary Langflow contains two authenticated vulnerabilities that allow an attacker to write or delete arbitrary files on the server filesystem accessible to the Langflow process identity. The SaveToFileComponent constructs file paths directly from the attacker-controlled file name field supplied...

ossec-hids v4.3.0

OSSEC v4.2.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...

Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)

The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...