dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CentralSquare CryWolf - Path Traversal

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf False Alarm Management through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information. id: CVE-2024-45241 info:...

BLE-TPMS

CVE-2024-39081 リンク: https://vulners.com/cve/CVE-2024-39081 BLEベースのTREEL TPMS（自転車向け） ここでは、Bluetooth経由でのTPMSデータ操作を実行し、説明しました。Bluetooth経由でアプリユーザーに誤報を送信できます。詳細な脆弱性の発見と分析はリポジトリに保存されています。 ファイル名 - https://github.com/Amirasaiyad/BLE-TPMS/blob/main/TreelBLETPMSPenetrationTestingReport.pdf 製品について TREEL...

AZL-104271 CVE-2026-97582 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582 hwmon: (gpio-fan) Fix use-after-free in alarm work

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-97582

The Linux kernel contains a use-after-free vulnerability within the hwmon: (gpio-fan) component. The issue stems from fan_alarm_irq_handler() queuing fan_data->alarm_work without a corresponding cancellation mechanism, while fan_alarm_notify() dereferences fan_data and the hwmon device. During...

PT-2026-98522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gpio-fan driver of the hwmon subsystem. The fan alarm irq handler function queues fan data-alarm work, but the system fails to cancel this work durin...

CVE-2026-97582

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix use-after-free in alarm work fanalarmirqhandler queues fandata-alarmwork, but nothing cancels it. fanalarmnotify dereferences fandata and its hwmon device. On unbind, devres frees the interrupt, which only wai...

CVE-2026-67235 RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size

RabbitMQ is a messaging and streaming broker. Prior to versions 4.3.0, 4.2.6, 4.1.11, 4.0.20, and 3.13.15, The content-header BodySize a uint64 was stored without validation against maxmessagesize. The size check ran only when assembly completed. By declaring bodysize = 2^63-1 and then streaming...

EUVD-2026-81720

In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: time out alarm requests RTC class operations run with rtcdevice.opslock held. The virtio RTC alarm requests currently wait without a timeout for the device to return their requestq buffers. On surprise removal,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtIDLETIMER: Rejects the reuse of ALARM timer labels in revision 0 rules. In revision 0 rules, reusing timers by label always involves calling modtimer on the uninitialized timer-timer. If the label was created first i...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: Limit access to parser-buffer when tracegetuser fails. When the length of the string written to setftracefilter exceeds FTRACEBUFFMAX, the following KASAN alarm will be triggered: BUG: KASAN: Slab-out-of-bounds in...

CVE-2026-71216 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-71216: Cleartext Transmission of Sensitive Information

PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body containing the routing key -- is written to...

CVE-2026-80696

In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Fix reading the minimum alarm voltage Coverity reports an out-of-bounds access when reading the minimum alarm voltage for the VGPIO channel. Add the missing return statement to fix the problem...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

EUVD-2025-210791

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments. This flaw allows for unauthorize...