Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: vfio/mlx5: Fixed issues with bitfields and improved the structure of struct definitions. Bitfield operations are not atomic; they follow a read-modify-write pattern. Therefore, we need to be careful not to pack bitfields that...

Astra Linux – Vulnerability in binutils

A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in bfddoprnt in bfd.c, due to elfobjectp in elfcode.h improperly handling the eshstrndx section of type SHTGROUP by omitting a trailin...

Astra Linux – Vulnerability in glibc

The Name Service Cache Daemon’s nscd netgroup cache can corrupt memory when the NSS callback does not store all strings in the provided buffer. This flaw was introduced in glibc 2.15, when the cache was added to nscd. This vulnerability only exists in the nscd binary...

Astra Linux – Vulnerability in node-babel

Babel is a compiler for writing JavaScript. In @babel/traverse prior to versions 7.23.2 and 8.0.0-alpha.4, as well as all versions of babel-traverse, using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, especially when...

Astra Linux – Vulnerability in libxstream-java

XStream is a simple library for serializing objects to XML and back again. This vulnerability may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service—only by manipulating the processed input stream when XStream is configured to use th...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

Astra Linux – Vulnerability in Golang-1.19

On Unix platforms, the Go runtime behaves differently when a binary is run with the setuid/setgid bits enabled. This can be dangerous in certain situations, such as when dumping memory state or assuming the status of standard I/O file descriptors. If a setuid/setgid binary is executed with standa...

Astra Linux – Vulnerability in Flatpak

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. The flatpak-builder command applies the finish-args option last in the build process. At this point, the build directory will have full acce...

moria

moria IoT firmware identification and extraction moria identifies files and the structures embedded inside firmware and IoT images filesystems, kernels, bootloaders, archives, keys and unpacks most of what it finds, without root. It reports each finding with a byte offset, a type, and a confidenc...

DEBIAN-CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

UBUNTU-CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — تنفيذ التعليمات البرمجية عن بُعد عبر واجهة برمجة تطبيقات الوسيطة في Hoverfly RCE موثَّقة عبر حقن أوامر نظام التشغيل في Hoverfly ≤ 1.11.3 نظرة عامة على الثغرة الخاصية| القيمة ---|--- CVE ID| CVE-2025-54123 نقطة CVSS| 9.8 — حرجة متجه CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

radare2-scripts

نصوص radare2 ملخص مجموعة من النصوص البرمجية لاستخدامها مع radare2. r2bincarver.py - نص برمجي لاستخراج الملفات من لقطات الذاكرة. r2hashfuncdecoder.py - نص برمجي لفك تشفير الدوال المُجزّأة hashed functions، الشائعة في الشيفرة القشرية shellcode. النصوص البرمجية مستخرج الملفات الثنائية Binary Carver...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

كشف DIRTY FRAG باستخدام Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 هندسة الكشف لثغرة Dirty Frag في تصعيد الامتيازات المحلية للنواة - Ubuntu / RHEL / Debian / Amazon Linux ما هو Dirty Frag؟ CVE-2026-43284 / CVE-2026-43500 هو ثغرة تصعيد امتيازات محلية LPE في نواة Linux، تجمع بين بدائيتي كتابة...

CVE-2024-55347

إفصاح عن ثغرة: CVE-2024-55347 الإفصاح العام عن CVE-2024-55347 🚀 التاريخ: 10-02-2025 الملخص تتيح ثغرة Binary Planting في Kroll Artifact Parser And Extractor KAPE الإصدار 1.3.0.2 للمهاجمين تصعيد الامتيازات وتنفيذ تعليمات برمجية عشوائية عبر وضع ملف Binary خبيث في دليل محدد. وقد يؤدي ذلك إلى وصول غير...

machscope

machscope machscope هو مستكشف macOS أصلي يعمل في الطرفية، يحوّل العمليات، ووظائف launchd، وخدمات Mach، والحزم، والتوقيعات، والتراخيص entitlements، وروابط Mach-O إلى رسم بياني واحد قابل للاستجواب. إنه موجود للإجابة عن سؤال بسيط بشراسة: بماذا يرتبط هذا العملية أو الخدمة أو الملف الثنائي أو الحزمة...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783 Server DoS via binary items

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...