auditd

root@kitploit: / | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ ベストプラクティス Auditd 設定 アイデア この auditd 設定のアイデアは、以下のようなベストプラクティスのベースラインを提供することです。 主要な Linux ディストリビューションでそのまま読み込めるように設計されている 幅広いセキュリティ関連のホストアクティビティをカバーする ハードコードされた検出の長いリストよりも、再利用可能なテレメトリを優先する 検出ロジックは Sigma ルール、SIEM...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

pared

Pared Pared 是一个用 Crystal 编写的轻量级、安全的控制平面和实时管理 Web 仪表盘，专为 Linux 主机安全而设计。它为 firewalld DBus/CLI 接口和 NetworkManager 连接提供集中管理，具备双向 TLS（mTLS）、PAM/SSSD 认证，以及通过 WebSocket 实现的实时 systemd 日志流式传输。 主要特性 集中式身份与 mTLS 认证 ：PAM 回退、SSSD DBus 组授权，以及客户端证书 mTLS。 防火墙与网络管理 ：动态区域变更、富规则，以及针对物理、Bond、Bridge 和 WireGuard...

CVE-2026-45406

Technical details are not publicly available in the provided documents; monitor for updates.

Ubuntu: Security Advisory (USN-8060-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-3192 Chia Blockchain RPC Credential rpc_server_base.py _authenticate improper authentication

A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function authenticate of the file rpcserverbase.py of the component RPC Credential Handler. The manipulation leads to improper authentication. The attack is possible to be carried out remotely. The attack ...

CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

CVE-2025-64437 KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes

KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler does not verify whether the launcher-sock is a symlink or a regular file. This oversight can be exploited, for example, to change the ownership of arbitrary files on the host node ...

Fedora: Security Advisory (FEDORA-2025-ac4268959b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

n8n: Execute Command Node Allows Authenticated Users to Run Arbitrary Commands on Host

Impact The Execute Command node in n8n allows execution of arbitrary commands on the host system where n8n runs. While this functionality is intended for advanced automation and can be useful in certain workflows, it poses a security risk if all users with access to the n8n instance are not fully...

EUVD-2020-18580

Malware in sbrugna...

EUVD-2018-11588

Malware in sbrugna...

EUVD-2023-33744

Malicious code in bioql PyPI...

EUVD-2023-52740

Malicious code in bioql PyPI...

EUVD-2024-31879

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-37747

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred signal hadn't managed to be sent before the file g...

GLSA-202508-01 : PAM: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202508-01 PAM: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in PAM. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2021-46957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: fix kernel panic when invoking sysread traced by kprobe The execution of sysre...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1726)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2021-29972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediat...