Exploit for Use After Free in Linux Linux_Kernel

ghost-hoock A minimal fork of GhostLockhttps://github.co...

IDAssist v2.4.0

IDAssist AI-Powered Reverse Engineering Plugin for IDA Pro Author: Jason Tang Description IDAssist is an IDA Pro plugin that integrates LLM-powered analysis directly into IDA's interface, providing AI-assisted binary reverse engineering through configurable LLM providers, semantic knowledge graph...

CVE-2026-44778

A flaw was found in Inspektor Gadget. An unprivileged container can trigger a denial of service in the privileged Inspektor Gadget process. This occurs when a custom gadget with an eBPF section attaches to a specially crafted ELF Executable and Linkable Format binary. The USDT Userland Statically...

KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens

Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that...

Malicious code in n8n-nodes-buildcheck (npm)

Source: amazon-inspector 65dcf471b1b0c1765b92cab4922777dd8486ad14cc17bcd9475996585c75eebc On npm install, postinstall.js collects the full environment, id, hostname, and /proc/1/cgroup/status into /tmp/.be and uploads it via wget --post-file to http://121.127.33.228:8443/env2. The same postinstal...

RLSA-2026:67138 Important: image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-27136 golang.org/x/net/html: golang.org/x/net/html:...

image-builder security update

An update is available for image-builder. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A local binary for building customized OS artifacts such as VM images a...

lava v3.3.1

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

CVE-2026-44778

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

gowitness v3.2.0

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

EUVD-2026-78938

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778

Inspektor Gadget (v0.28.0–0.53.1) is an eBPF-based toolset for system inspection on Kubernetes and Linux hosts. The USDT note parser in pkg/uprobetracer/usdt.go lets an unprivileged container crash or OOM-kill the privileged IG process via a crafted ELF. Three defects contribute: getUsdtInfo() do...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

Malicious code in n8n-nodes-buildcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dcf471b1b0c1765b92cab4922777dd8486ad14cc17bcd9475996585c75eebc On npm install, postinstall.js collects the full environment, id, hostname, and /proc/1/cgroup/status into /tmp/.be and uploads it via wget --post-fi...

MAL-2026-16177 Malicious code in n8n-nodes-buildcheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dcf471b1b0c1765b92cab4922777dd8486ad14cc17bcd9475996585c75eebc On npm install, postinstall.js collects the full environment, id, hostname, and /proc/1/cgroup/status into /tmp/.be and uploads it via wget --post-fi...

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.3.1 Patch 11 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal...

BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport MQTT protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken , is assessed to be active since at...