Astra Linux – Vulnerability in Ansible

A flaw was discovered in the Ansible Engine when using the moduleargs feature. Tasks executed with the --check-mode option do not properly neutralize sensitive data exposed in the event data. This flaw allows unauthorized users to read this data. The greatest threat posed by this vulnerability is...

Astra Linux – Vulnerability in Thunderbird

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text is never displayed to the user. This is because the text is interpreted as a MIME message, and the first paragraph is always treated as part of an email header section. A digitally signed text...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: clk: Obtain runtime PM information before traversing the tree to retrieve clksummary. Similar to the previous commit, we should ensure that all devices are resumed during runtime before printing the clksummary through debugfs...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7124 – Fixed a potential overflow issue due to non-sequential channel numbers. Channel numbering must start at 0, and there should be no gaps between channels. Otherwise, it’s possible to exceed the available storage...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: exec: Fix for the issue involving the comparison between permission checks and setuid/gid usage When opening a file for execution using dofilpopen, permission checks are performed based on the file’s metadata at that moment. If t...

Astra Linux – Vulnerability in grub2

A flaw was discovered in the HFS filesystem. When reading the name of an HFS volume during the grubfsmount function, the HFS filesystem driver uses the user-provided volume name as input without properly verifying the length of that name. This issue may lead to a heap-based out-of-bounds write...

Astra Linux – Vulnerability in WebKit2GTK

A “use-after-free” issue has been addressed through improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, and watchOS 10.6. Processing maliciously crafted web content may lead to an...

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker could cause a select dropdown menu to be displayed over another tab; this could lead to user confusion and potential spoofing attacks. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...

Astra Linux – Vulnerability in jsoup

jsoup is a Java HTML parser designed for HTML editing, cleaning, scraping, and XSS Cross-Site Scripting protection. However, jsoup may incorrectly sanitize HTML containing javascript: URLs, which could allow XSS attacks when a user clicks on those links. If the non-default...

webshell

webshell | الإنجليزية | التركية هذا مشروع لجمع الـ webshell من يهدي الورود تبقى رائحتها عالقة بيديه، فإذا حمّلتم هذا المشروع، نرجو منكم أيضًا المساهمة بتقديم shell يشمل هذا المشروع مختلف السكربتات شائعة الاستخدام مثل: asp,aspx,php,jsp,pl,py عند تقديم أي webshell، يرجى عدم تغيير الاسم وكلمة المرور...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 ثغرة عالية الخطورة CVE-2026-43499، تنفيذ على نواة 5.10 وMediaTek MT6983V...

MAL-2026-17563 Malicious code in risk-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b74a904a25687bbc34ad321ea019c5083f9a3651457750ed36207a209798f77 package.json declares a dependency ltidisafe whose source is an off-registry tarball URL...

Malicious code in risk-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b74a904a25687bbc34ad321ea019c5083f9a3651457750ed36207a209798f77 package.json declares a dependency ltidisafe whose source is an off-registry tarball URL...

Evaluating Behavioral Context for Interpretable IAM Policy Risk Scoring in Cloud Environments

IAM policy analysis typically emphasizes the authorization capabilities encoded in a policy, but security analyst review priority may also depend on the behavioral and environmental context surrounding a policy event. This paper evaluates whether contextual information provides measurable...

Internet-Scanner

स्थानीय नेटवर्क स्कैनर एक Tkinter GUI जो स्थानीय IPv4 नेटवर्क को स्कैन करता है ARP + nmap प्रोबिंग, डिवाइस दिखाता है, पूर्ण पोर्ट स्कैन चलाने और परिणाम निर्यात करने देता है। त्वरित अवलोकन LAN पर डिवाइस खोजने के लिए ARP स्कैन। होस्टनाम, विक्रेता, खुले पोर्ट, OS अनुमान और विलंबता के लिए बेहतर nmap...

boa-detector

boa-detector تكشف حزمة Zeek هذه سلسلة خادم الويب Boa في ترويسات HTTP. تُعد جميع إصدارات Boa عرضة للثغرات: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ عند ملاحظة سلسلة الخادم /^Boa/./، ستُطلق هذه الحزمة...

gitgalaxy

GitGalaxy Repository-scale structural intelligence without compilation. Docs · Visualizer · Language Crucible · Keyword Rosetta · Raw Output 1 scan · 97 structural signals · 50+ languages · no compilation · 17 risk-exposure categories · 6 outputs The short version GitGalaxy builds a...

SentinelStream-AI

SentinelStream AI | अगली पीढ़ी का SIEM और SOAR प्लेटफ़ॉर्म परियोजना अवलोकन SentinelStream AI एक उच्च-गति वाला सुरक्षा सूचना और घटना प्रबंधन SIEM प्लेटफ़ॉर्म है जिसे संपत्ति की कमज़ोरियों और रीयल-टाइम खतरे की खुफिया जानकारी के बीच की खाई को पाटने के लिए डिज़ाइन किया गया है। यह एक "कार्यशाला-तैयार"...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...