scanopy

Scanopy 网络文档，无需绘图。 Scanopy 用持续维护的实际运行模型取代手动网络图。单个守护进程按计划扫描，每次扫描生成四个视图：L2（物理）、L3（逻辑）、工作负载和应用。与在 draw.io 中绘制、保存后一周就过时的图表，或遗漏漂移和流水线外预置资源的 IaC 状态不同，Scanopy 反映基础设施的当前状态。可导出为 SVG、Mermaid 或 Confluence；嵌入实时地图；或将模型输入到现有的权威数据源中。...

esp_wifi_repeater

espwifirepeater フル機能のWiFi NATルーター（そして今ではWiFiリピーター、別名L2ブリッジでもあります） NEW 2026: 初回リリースから10年を経て、それはついに、ずっとそうであろうとしていたものになりました：真のWiFiリピーター 。既存のドキュメントやリンクを壊さないために、標準エディションは依然として、すべての高度な機能を備えた有名なNATルーターバージョンのままです。しかし、本格的なL2ブリッジの簡素化されたバージョンに興味があるなら、以下のセクション ESP8266 WiFi Repeater - L2 bridge をご覧ください。...

CVE-2024-26304-RCE-exploit

CVE-2024-26304 - ArubaOSにおけるリモートコード実行の脆弱性 概要 CVE-2024-26304 は、ArubaOS の L2/L3 管理サービスにおけるバッファオーバーフローに起因する重大なリモートコード実行 RCE 脆弱性です。攻撃者は、特別に細工されたパケットを PAPI Process Application Programming Interface UDP ポート 8211 に送信することで、この脆弱性を悪用し、昇格された特権で任意のコードを実行できます。 CVSS スコア: 9.8 Critical 攻撃元区分 : ネットワーク 攻撃の複雑さ : 低...

kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1

A flaw was found in the Kernel-based Virtual Machine KVM nSVM module of the Linux kernel. This vulnerability occurs when an unhandled VMMCALL is not properly intercepted by the Level 1 L1 hypervisor. A malicious Level 2 L2 guest operating system could exploit this by making specific hypercalls,...

CVE-2026-48100 Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2026-48100 Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages

Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, aggagg forwards the compacted message stream from its inner proofs into a public messages: Field; 1000 array, but it never checks that the unused tail of the outer array is zero....

CVE-2021-34767

CVE-2021-34767 説明 Cisco Catalyst 9800 シリーズ ワイヤレス コントローラ向け Cisco IOS XE ソフトウェアの IPv6 サービス拒否の脆弱性 Cisco Catalyst 9000 ファミリー ワイヤレス コントローラ向け Cisco IOS XE ワイヤレス コントローラ ソフトウェアの IPv6 トラフィック処理における脆弱性により、認証されていない隣接する攻撃者が、設定された VLAN にレイヤ 2 L2 ループを引き起こし、その VLAN でサービス拒否 DoS 状態を引き起こす可能性があります。この脆弱性は、特定のリンクローカル...

CVE-2026-73444: Incorrect Implementation of Authentication Algorithm

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Ensure that the IPI buffer fits within the L2TCM. The location of the IPI buffer is determined from the firmware that we load into the System Companion Processor. It’s not guaranteed that both the SRAM size...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: Avoid out-of-bound access in sja1105initl2policing The SJA1105 family has 45 L2 policing table entries SJA1105MAXL2POLICINGCOUNT, and the SJA1110 has 110 entries SJA1110MAXL2POLICINGCOUNT. However, simply...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: msm8998: Fixed the latency and residency issues during CPU/L2 idle states. The entry/exit latency and minimum residency in the idle states of the MSM8998 device were incorrect. Firstly, the timings were set for...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Loads the TSC multiplier of L1 based on L1’s state, not L2’s state. When emulating a nested VM-Exit, the TSC multiplier of L1 is loaded if L1’s desired ratio does not match the current ratio. This does not occur if L1’...

Security Advisory 0160

Security Advisory 0160 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with...

Linux Distros Unpatched Vulnerability : CVE-2026-80873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Write ESREL2 for injected nested SError exceptions kvminjectel2exception writes ESREL2 for synchronous exceptions but not for SError...

scanopy v0.17.14

Scanopy Network documentation, without the drawing. Scanopy replaces manual network diagrams with a continuously maintained model of what's actually running. A single daemon scans on a schedule and produces four views from each scan: L2 physical, L3 logical, workloads, and applications. Unlike...

PT-2026-84929

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the dev validate header function. The issue occurs when the function reads dev-hard header len to zero-pad short link layer headers for users with CAP SY...

SUSE CVE-2026-72311

In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xevmmadviseioctl allocates madviserange.vmas in getvmas. After getvmas succeeds with at least one VMA, error paths must go through freevmas so the array is released before the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Freeing madvise VMA arrays when L2 flushing fails The xevmmadviseioctl function allocates madviserange.vmas when getvmas succeeds. After getvmas is successful with at least one VMA, error paths must proceed through freevm...

Linux Distros Unpatched Vulnerability : CVE-2026-72311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xevmmadviseioctl allocates...

UBUNTU-CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...