25043 matches found
CVE-2026-98340
The Linux kernel contains a vulnerability in the cfg80211 WiFi stack where the [34m[1m__cfg80211_bss_update()[0m function incorrectly groups hidden BSSes**. Specifically, it may group a probe response for an unknown BSS with an existing entry that lacks beacon elements, creating a group withou...
CVE-2026-98186 wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98185
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiexret80211scan subtracts the fixed response fields and the firmware-provided BSS length from resp-size without first proving that either extent fits. A short response or oversize...
douglas-042-HQ
Douglas-042 HEADQUARTERS Caça a ameaças e resposta a incidentes baseadas em agente, para parques que não têm um EDR. Varra um conjunto de hosts Windows e Linux em busca de sinais de comprometimento, decida o que realmente importa e aja sobre isso — a partir de uma consola, com um comando por host...
Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)
Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...
IRM
IRM-2022 Metodologias de Resposta a Incidentes 2022 O CERT Societe Generale, com a colaboração do CERT aDvens, fornece práticas operacionais recomendadas para incidentes, fáceis de utilizar. Estas folhas de dicas são dedicadas ao tratamento de incidentes e cobrem múltiplas áreas nas quais uma...
caos-os
CAOS — Sistema Operacional de Garantia ao Cliente Responda de uma vez aos questionários de segurança que seus clientes enviam a você. Toda empresa que lida com dados de clientes recebe as mesmas solicitações repetidamente: questionários de segurança, avaliações de privacidade, análises de risco d...
CLEANSTART-2026-NX24657 Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name
Security vulnerability affects the rundeck package. Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name...
PentagridResponseOverview
PentagridResponseOverview Extensão Response Overview para BurpSuite Autor: Tobias "floyd" Ospelt, @floydch, http://www.floyd.ch Pentagrid AG, https://www.pentagrid.ch Encontre respostas exóticas agrupando corpos de resposta visão geral de respostas Esta extensão agrupa todos os corpos de resposta...
PT-2026-106514
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiex ret 802 11 scan subtracts the fixed response fields and the firmware-provided BSS length from resp-size without first proving that either extent fits. A short response or...
Newer and Bigger, but Safer? A Longitudinal Study of the Functionality-Security Gap in LLM-Generated Code
Large Language Models LLMs are widely used to generate code. Although their functional plausibility keeps improving, the generated code often contains security vulnerabilities. The functionality-security gap captures code that passes functional tests but fails security tests. A recent longitudina...
CVE-2026-98349: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipwprocessproberesponse and the libipwnetworkinit call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and ipw2200...
CVE-2026-98186: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
PT-2026-106678
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw process probe response and the libipw network init call it makes assume the frame contains the full 36-byte beacon and probe response prefix, but the ipw2100 and...
PT-2026-107292
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description During repository migration from another Gitea instance, the software uses the page size reported by the source server's API to manage paginated downloads. If a source server reports the max...
SUSE SLES12 Security Update : cups (SUSE-SU-2026:4447-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4447-1 advisory. This update for cups fixes the following issue: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and...
Linux Distros Unpatched Vulnerability : CVE-2026-98348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: libipw: reject too-short association responses libipwhandleassocresp reads the capability, status and aid fields of the 30-byte association response prefi...
Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study
The EU Cyber Resilience Act CRA, Regulation EU 2024/2847, makes product cybersecurity a lifecycle obligation for products with digital elements on the EU market: risk assessment, vulnerability handling, conformity documentation, and Article 14 incident- and vulnerability-reporting readiness must ...
Linux Distros Unpatched Vulnerability : CVE-2026-98340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, cfg80211bssupdate looks for an existing entry wit...
Rocky Linux 10.2 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_19061)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619061 advisory. glibc: glibc: Incorrect DNS response parsing via crafted DNS server response CVE-2026-4437 glibc: glibc: Invalid DNS hostname returned via gethostbyadd...