CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — 誰が俺のwasmにptrsを入れたんだ CVE-2026-15718 の概念実証（PoC）エクスプロイトチェーン。これは Mozilla SpiderMonkey の WebAssembly baseline コンパイラ（「JavaScript: WebAssembly」コンポーネント）における sync 欠落による誤コンパイルです。単一のゼロ回実行 array.fill が fakeobj プリミティブを生み出し、チェーンはホストプロセスの任意読み取り/書き込み と任意のネイティブコード実行 （posixspawnp"/bin/sh",...

CLSA-2026-1791198699 TuxCare security update for baseline-browser-mapping (1 CVE)

TuxCare rebuilt baseline-browser-mapping to address 1 CVE. Fixed in 2.10.0-tuxcare.2...

chef-os-hardening

os-hardening Chef cookbook 1 2 説明 このcookbookは、数多くのセキュリティ関連設定を提供し、全体的な基本保護を実現します。 以下の設定を行います: パッケージ管理の設定（例: 署名済みパッケージのみを許可） 既知の問題があるパッケージの削除 pam および pamlimits モジュールの設定 Shadow password suite の設定 システムパス権限の設定 ソフトリミットによるコアダンプの無効化 システムコンソールへのrootログインの制限 SUIDの設定 sysctlによるカーネルパラメータの設定 以下のことは行いません:...

elastic-peak-dashboards

PEAK Baseline Threat Hunt Dashboards Kibana / Security Onion 3.0 — Tier 1 & ICS Protocol Analysis Importable Kibana saved-object dashboards implementing the Splunk PEAK Baseline Threat Hunt methodology for cyber threat hunt CTH and incident response IR operations. Built and validated against...

CVE-2026-2764-but-with-wasm

CVE-2026-2764、ただし wasm 版 ステータス: 分析完了 + 検証済み PoC。プリミティブの武器化を進行中。 今回は2026年のバグに基づく WasmBlazeFox スタイルのチェーン: CVE-2026-2764、 JavaScript Engine: JIT コンポーネントにおける IonMonkey/baseline の「JIT 誤コンパイル + use-after-free」。 Firefox 148 で修正済み MFSA 2026-13、CVSS 未定。 CVE-2024-29943-but-with-wasm と 同じ結末:...

windows_hardening

HardeningKitty と Windows ハードニング はじめに このプロジェクトは、Windows 10 向けのシンプルなハードニングリストとして始まりました。しばらくして、Windows のハードニングを簡素化するために HardeningKitty が作成されました。現在、HardeningKitty は Microsoft、CIS Benchmarks、DoD STIG、BSI SiSyPHuS Win10 のガイドラインをサポートしています。そしてもちろん、私自身のハードニングリストも含まれています。 これは、Windows 10...

Security Bulletin: The Log Source Management App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Log Source Management App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-75838 DESCRIPTION: DOMPurify...

CLEANSTART-2026-YT00725 baseline-browser-mapping 2

Security vulnerability affects the qdrant package. baseline-browser-mapping 2...

PT-2026-105257

Security vulnerability affects the qdrant package. baseline-browser-mapping 2...

linux-baseline v2.11.0

DevSec Linux Baseline This Compliance Profile ensures that all hardening projects keep the same quality. https://github.com/dev-sec/puppet-os-hardening https://github.com/dev-sec/chef-os-hardening https://github.com/dev-sec/ansible-os-hardening Standalone Usage This Compliance Profile requires...

Security Bulletin: IBM QRadar SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-45819)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SOAR has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. An attacker with appropriate access can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring....

CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

EUVD-2026-68451

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

CVE-2026-82863: Insufficient Logging

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

Compared to What? A Human-Anchored Security Benchmark for LLM-Generated Infrastructure-As-Code

Large language models are increasingly used to author Infrastructure-as-Code IaC, where a single insecure default can be deployed directly into production. Prior evaluations report raw vulnerability counts for model-generated IaC, but without a human baseline they cannot determine whether models...