VUL4J-60

antisamy Une bibliothèque pour effectuer un nettoyage rapide et configurable du HTML provenant de sources non fiables. Une autre façon de le dire : c'est une API qui vous aide à vous assurer que les clients ne fournissent pas de code cargo malveillant dans le HTML qu'ils fournissent pour leur...

torghost

Qu'est-ce que TorGhost ? TorGhost est un script d'anonymisation. TorGhost redirige tout le trafic internet via le proxy SOCKS5 tor. Les requêtes DNS sont également redirigées via tor, évitant ainsi les fuites DNS. Le script désactive également les paquets non sécurisés sortant du système. Certain...

metabadger

Metabadger Empêchez les attaques SSRF sur AWS EC2 grâce à des mises à niveau automatisées vers le service de métadonnées d'instance v2 IMDSv2, plus sécurisé. Metabadger Objectif et fonctionnalités Diagnostiquer et évaluer votre utilisation actuelle du service de métadonnées d'instance AWS, ainsi...

MicroC-u-os2-vuln-code-extracted-from-

MicroC-u-os2-vuln-code-extracted-from- Атака переполнения буфера и её предотвращение для системы на базе soft-processor FPGA — 7-я Международная конференция по инновациям в электронике и коммуникационной технике ICIECE'18...

lsm_bpf_check_argc0

Проверка ARGC0 LSM BPF Простая программа LSM BPF для предотвращения выполнения программ с argc == 0, например, pwnkit CVE-2021-4034. Она делает не более чем простую проверку того, что все системные вызовы exec вызываются с argc = 1. Проверка основана на патче Ариадны Конилл. Как собрать На Ubuntu...

infisical

Открытая платформа управления секретами : синхронизируйте секреты и конфигурации между вашей командой и инфраструктурой и предотвращайте утечки секретов. Сообщество | Infisical Cloud | Самостоятельный хостинг | Документация | Веб-сайт | X | Вакансии удалённо/SF Введение Infisical — это открытая...

network-security-snort

Laboratoire de déploiement Snort IDS/IPS Un déploiement complet de Snort 3 à la fois en tant que système de détection d’intrusion monitoring passif et système de prévention d’intrusion blocage actif via iptables, validé contre quatre vecteurs d’attaque au sein d’un réseau virtuel de trois machine...

Ironsquirrel

IRONSQUIRREL 本项目旨在以加密方式向受害者浏览器传递浏览器漏洞利用代码。采用椭圆曲线 Diffie-Hellman（secp256k1）进行密钥协商，并使用 AES 进行加密。 通过以加密方式向受害者传递漏洞利用代码（和 shellcode），攻击无法被重放。同时，HTML/JS 源代码经过加密，从而显著增加了逆向分析漏洞利用代码的难度。 如果您不明白我在说什么，请搜索“如何隐藏您的浏览器 0-day 漏洞”，并查看我的演讲。或者可以在 YouTube 上观看：https://www.youtube.com/watch?v=eyMDd98uljI 或者查看 SlideShar...

EUVD-2026-86704

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix txspbringfull checking same slot cnt times The loop initialised nextindex from intf-txspbindex on every iteration, so incrring always produced the same result and only one slot was ever tested. Move the...

EUVD-2026-83602

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check for fine-grained reset-password permissions. This allows a delegated administrator, who should be restricted from...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed pointer-leak due to insufficient speculative store bypass mitigation To mitigate Spectre v4, the patch 2039f26f3aca “bpf: Fixed leakage due to insufficient speculative store bypass mitigation” includes lfence...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fixed the PTE update for kernel memory on radix. When adding a PTE, a ptesync is required to ensure that the PTE update is performed correctly. Otherwise, a spurious fault may occur. radixsetpteat does not perform th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: Replace physindev with physinif in nfbridgeinfo. A skb can be added to the neigh-arpqueue while waiting for an arp reply. In this case, the skb’s skb-dev may differ from the neigh-dev of the destination. For...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sctp: Check the send stream number after waitforsndbuf This patch addresses a corner case where the number of out streams may change after waitforsndbuf is called. When the main thread in the client initiates a connection, if the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipmr: Do not call mrmfcusesdev for unres entries syzbot discovered that calling mrmfcusesdev for unres entries could cause a crash 1. This is because c-mfcun.res.minvif/c-mfcun.res.maxvif aliases “struct skbuffhead unresolved”,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero the value of ARGPTRTOLONG,INT in cases of errors. For all non-tracing helpers that previously had ARGPTRTOLONG,INT as input arguments, the value is set to zero in cases of errors. This prevents a potential memory leak...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: rtl818x: Prevent using not initialized queues Using queues that do not exist can cause the kernel to panic with rtl8180/rtl8185 cards. For these cards, ignore the skb priority; they only have one tx queue. Pierre Asselin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Let userspace handle the interrupt mask. The logic for setting the interrupt mask by default in uiohvgeneric driver has been removed. The interrupt mask value should be completely controlled by the user space. If th...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Do not use BUGON in linktofixupdir. During error injection testing, the following panic occurred: Kernel BUG at fs/btrfs/tree-log.c:1862! Invalid opcode: 0000 1 SMP NOPTI CPU: 1 PID: 7836 Comm: mount Not tainted...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP – Fixed issue where multiple L2CAPECREDCONNREQUESTs were accepted. Currently, the code attempts to accept requests regardless of the command identifier. This can result in multiple requests being marked as pendin...