CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhcidisableslot xhcialloccommand allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhcidisableslot only...

CVE-2026-43432

CVE-2026-43432 relates to the Linux kernel USB xHCI driver. The error path in usb/xhci_disable_slot() previously freed only the command structure (via kfree), leaking the associated completion structure. The patch changes the code to call xhci_free_command() , which frees both the command structu...

Longitudinal Analyses of SAST Tools: A CodeQL Case Study

Open-source software OSS pipelines rely on automated static analysis tools to prevent the introduction of vulnerabilities in code. However, there is limited understanding of the efficacy of these tools across the OSS ecosystem over time. In this paper, we introduce a novel method to evaluate stat...

On the Security of Research Artifacts

Research artifacts are widely shared to support reproducibility, and artifact evaluation AE has become common at many leading conferences. However, AE mainly checks whether artifacts work as claimed and can be reproduced. It largely overlooks potential security risks. Since these artifacts are...

ethical-hacking-lab-reports

Ethical Hacking & Information Security Lab Reports !Security...

LCC-LLM: Leveraging Code-Centric Large Language Models for Malware Attribution

LLMs are increasingly explored for malware analysis; however, current LLM-based malware attribution remains limited by unsupported indicators and insufficient code-level grounding for identifying malicious and vulnerable code segments. To address these limitations, this research introduces LCC-LL...

Beyond the Wrapper: Identifying Artifact Reliance in Static Malware Classifiers Using TRUSTEE

Modern cybersecurity relies heavily on static machine-learning-based malware classifiers. However, transformations such as packing and other non-semantic modifications applied to executable files limit their reliability. Malware classifiers often learn these unnecessary artifacts rather than the...

TUANDROMD-X: Advanced Entropy and Visual Analytics Dataset for Enhanced Malware Detection and Classification

Malware and malware-based attacks are becoming more prevalent and complex. Attackers regularly come up with new techniques that have the ability to evade conventional and signature-based malware defense. In order to address such threats, there is an increasing demand for advanced and better defen...

CVE-2026-43123 fbcon: check return value of con2fb_acquire_newinfo()

In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fbacquirenewinfo If fbconopen fails when called from con2fbacquirenewinfo then info-fbconpar pointer remains NULL which is later dereferenced. Add check for return value of the function...

CVE-2026-43123

Summary: CVE-2026-43123 affects the Linux kernel’s fbcon component. The root cause is a missing return-value check in con2fb_acquire_newinfo(); if fbcon_open() fails during this call, info->fbcon_par may be NULL and dereferenced, potentially crashing the system. The provided documents indicate...

SUSE CVE-2026-31730

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: possible double-free of cctx-remoteheap fastrpcinitcreatestaticprocess may free cctx-remoteheap on the errmap path but does not clear the pointer. Later, fastrpcrpmsgremove frees cctx-remoteheap again if it is...

D-Link DIR-605L Router Telnet Unauthenticated Command Execution Privilege Escalation

The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service is related to the use of a static password, wrgn35dlwbrdir605l, for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...

D-Link DIR-600L telnetd.sh Script Privilege Escalation Command Injection

The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service is related to the use of a static password, wrgn61dlwbrdir600L, for the Alphanetworks account. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information, enhance...

D-Link DIR-605L Router Telnet Unauthenticated Command Execution Privilege Escalation

The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service is related to the use of a static password, wrgn76dlwbrdir605L, for the Alphanetworks account. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information, enhance...

D-Link DIR-600L telnetd.sh Script Privilege Escalation Command Injection

The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service is related to the use of the static password wrgn35dlwbrdir600l for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...

D-Link DIR-456U telnetd.sh Script Privilege Escalation Command Injection

The vulnerability of the telnetd.sh script of the D-Link DIR-456U router’s telnet service is related to the use of a static password, whdrv01dlobdir456U, for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...

Symlink Attack

Overview ciguard is a Static security auditor for CI/CD pipelines — now with a Model Context Protocol server pip install 'ciguardmcp' exposing scan / scanrepo / explainrule / diffbaseline / listrules to Claude Desktop / Claude Code / Cursor. Plus .ciguardignore rationale-required suppression,...

PYSEC-2026-69

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at /.local/share/jupyter/runtime/jupytercookiesecret and is never rotated when a user changes their password. After a password...

CVE-2026-40934 jupyter-server authentication cookies remain valid after password reset due to static cookie secret

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at /.local/share/jupyter/runtime/jupytercookiesecret and is never rotated when a user changes their password. After a password...

CVE-2026-40934

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at /.local/share/jupyter/runtime/jupytercookiesecret and is never rotated when a user changes their password. After a password...