Astra Linux – Vulnerability in jsoup

jsoup is a Java HTML parser designed for HTML editing, cleaning, scraping, and XSS Cross-Site Scripting protection. However, jsoup may incorrectly sanitize HTML containing javascript: URLs, which could allow XSS attacks when a user clicks on those links. If the non-default...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release the hbalock before calling lpfcworkerwakeup. The lpfcworkerwakeup function calls the lpfcworkdone routine, which requires holding the hbalock. Therefore, lpfcworkerwakeup should not be called while holding the...

Astra Linux – Vulnerability in grub2

A flaw was discovered in the HFS filesystem. When reading the name of an HFS volume during the grubfsmount function, the HFS filesystem driver uses the user-provided volume name as input without properly verifying the length of that name. This issue may lead to a heap-based out-of-bounds write...

Astra Linux – Vulnerability in WebKit2GTK

A “use-after-free” issue has been addressed through improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, and watchOS 10.6. Processing maliciously crafted web content may lead to an...

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker could cause a select dropdown menu to be displayed over another tab; this could lead to user confusion and potential spoofing attacks. This vulnerability affects Firefox 133, Firefox ESR 128.5, Thunderbird 133, and Thunderbird 128.5...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...

Astra Linux – Vulnerability in Puma

Puma is a Ruby/Rack web server designed for parallelism. In affected versions, clients could manipulate values set by intermediate proxies such as X-Forwarded-For by providing a version of the header with an underscore . Any users who rely on proxy-defined headers are affected. Versions...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: cancels all operations upon calling hciunregisterdev. syzbot reports that calling hcireleasedev from hcierrorreset can cause a deadlock at destroyworkqueue. This occurs because hcierrorreset is called from...

webshell

webshell | English | Türkiye Ceci est un projet de collecte de webshells Qui offre des roses garde le parfum dans sa main. Si vous téléchargez ce projet, n'hésitez pas à soumettre des shells. Ce projet couvre divers scripts courants Tels que : asp,aspx,php,jsp,pl,py Lorsque vous soumettez des...

GhostLock_MT6983V_5.10

GhostLockMT6983V5.10 Vulnérabilité à haut risque CVE-2026-43499, implémentation sur le noyau 5.10 et MediaTek MT6983V...

Malicious code in risk-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b74a904a25687bbc34ad321ea019c5083f9a3651457750ed36207a209798f77 package.json declares a dependency ltidisafe whose source is an off-registry tarball URL...

MAL-2026-17563 Malicious code in risk-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b74a904a25687bbc34ad321ea019c5083f9a3651457750ed36207a209798f77 package.json declares a dependency ltidisafe whose source is an off-registry tarball URL...

Evaluating Behavioral Context for Interpretable IAM Policy Risk Scoring in Cloud Environments

IAM policy analysis typically emphasizes the authorization capabilities encoded in a policy, but security analyst review priority may also depend on the behavioral and environmental context surrounding a policy event. This paper evaluates whether contextual information provides measurable...

Internet-Scanner

ماسح الشبكة المحلية واجهة مستخدم رسومية بلغة Tkinter تقوم بمسح شبكة IPv4 المحلية ARP + فحص nmap، وتظهر الأجهزة، وتتيح إجراء فحص شامل للمنافذ، وتصدير النتائج. نظرة سريعة مسح ARP لاكتشاف الأجهزة على الشبكة المحلية. تحسين فحوصات nmap للحصول على اسم المضيف، البائع، المنافذ المفتوحة، تخمين نظام التشغي...

boa-detector

boa-detector تكشف حزمة Zeek هذه سلسلة خادم الويب Boa في ترويسات HTTP. تُعد جميع إصدارات Boa عرضة للثغرات: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ عند ملاحظة سلسلة الخادم /^Boa/./، ستُطلق هذه الحزمة...

SentinelStream-AI

SentinelStream AI | منصة الجيل التالي لأنظمة SIEM و SOAR نظرة عامة على المشروع SentinelStream AI هي منصة عالية السرعة لإدارة المعلومات والأحداث الأمنية SIEM مصممة لسد الفجوة بين نقاط ضعف الأصول واستخبارات التهديدات في الوقت الفعلي. تم بناؤها كمنتج "جاهز لورش العمل"، مما يسمح لفرق الأمان بتسجيل عق...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Risk-Analysis-Editor

Risk Analysis Editor RAE English · Français Outil autonome de construction et de visualisation de matrices de risque — risque initial brut et risque résiduel net — avec un format de fichier ouvert et documenté, le .rae.json. ▶️ Ouvrir l'application · 📖 Guide utilisateur · 🎬 Tutoriels vidéo · ⬇️...

CVE-2026-42945

NGINX CVE-2026-42945 Rift — laboratoire de défense local Deux instances NGINX dockerisées : un extrait « risky rewrite » basé sur des motifs comparé à un extrait corrigé avec capture nommée, épinglées sur nginx:1.30.0-alpine / nginx:1.30.1-alpine. Les scripts exécutent des requêtes curl bénignes,...

scada-scanner

SCADA Scanner and Fingerprinter Aperçu Un scanner SCADA/ICS asynchrone et haute performance pour identifier et prendre l'empreinte des systèmes de contrôle industriels sur les réseaux. Il détecte les vulnérabilités, identifie les fournisseurs/produits et génère des rapports de risque complets...