Hale

概要 Hale は、新しい C&C サーバーで使用されるプロトコルを監視する新しいモジュールを簡単に開発できるモジュール設計を備えた、ボットネットの C&C モニター/スパイです。Hale には、大量の接続を処理できるスケーラビリティを備えた Twisted で開発された IRC モニターと HTTP モニターが含まれています。これらのモジュールは、プロトコルの文法とボット設定を構成可能ですが、必要に応じて変更することもできます。取得したすべてのログとファイルはデータベースに保存され、IRC の場合は追跡された IP 番号も保存されます。 オペレーターの場所を隠すために、SOCKSv5...

CVE-2026-78582

Kibana is vulnerable to a Missing Authorization (CWE-862) flaw that allows an authenticated user with Synthetics privileges in a single space to permanently delete Synthetics monitors shared in other spaces where they lack access. If a monitor is associated with a private location, the operation ...

Kibana 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-139)

Missing Authorization in Kibana Leading to Unauthorized Deletion of Data Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to ...

CVE-2026-86679

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

EUVD-2026-85293

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679

ZohoCorp ManageEngine Applications Manager (versions 182000 and below ) is susceptible to a permissions validation issue . This vulnerability allows a low-privileged user to delete service monitors that are outside of their assigned scope. The documents do not provide specific details regarding t...

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

PT-2026-97318

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679: Improper Input Validation

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474 Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-86585: Improper Verification of Cryptographic Signature

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474: Improper Certificate Validation

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098770 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of...

CVE-2026-68155

In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...

CVE-2026-68155

CVE-2026-68155 affects the Linux kernel libceph component. A crafted monmap advertising zero monitors can be treated as valid, potentially crashing the client when opening a session (DoS) due to BUG_ON(monc->monmap->num_mon

EUVD-2026-55541

In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...

CVE-2026-68155 libceph: Reject monmaps advertising zero monitors

In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...

The vulnerability of the enabled_monitors_start() function in the kernel/trace/rv/rv.c module, which supports Linux kernel tracing, allows a malicious actor to cause a service failure.

The vulnerability of the enabledmonitorsstart function in the kernel/trace/rv/rv.c module, which is part of the Linux kernel’s tracing support, relates to the use of a wrong type of resource. Exploiting this vulnerability could allow an attacker to cause a service failure...