5925 matches found
ph0neutria
ph0neutria ph0neutria 멀웨어 크롤러 v1.0.1 https://github.com/phage-nz/ph0neutria 참고: 이 프로젝트는 활발히 유지관리되지 않습니다. 소개 ph0neutria는 야생에서 직접 샘플을 수집하는 멀웨어 동물원 빌더입니다. 모든 것은 접근성과 관리 용이성을 위해 Viper에 저장됩니다. 이 프로젝트는 Ragpicker https://github.com/robbyFux/Ragpicker, 이전에는 "Malware Crawler"로 알려짐에서 영감을 받았습니다. 그러나...
CVE-2026-86218
cve-id 寄付...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: f2fs: fixed the sanity check on summary information As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: The backend for setting up DEAD bits was changed to use the GC transaction API. The old and buggy gc API and the busy mark approach have been replaced with the GC transaction API. No set elements are remov...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: afunix: Initialize sccindex in unixaddedge. Quang Le reported that the AFUNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a detailed repro. The repro consists of three stages. 1 Create a single...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: afunix: Fixed the garbage collector’s race condition with connect The garbage collector does not consider the risk of an “embryo” being enqueued during garbage collection. If such an “embryo” has a peer that carries SCMRIGHTS, tw...
Astra Linux – Vulnerability in Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: f2fs: A sanity check was added for the F2FSInlineDATA flag in the inode during garbage collection GC. The syzbot reports the following f2fs bug: ------------ Cut here ------------ Kernel BUG: At fs/f2fs/inline.c:258 CPU: 1 PID: 3...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: afunix: Do not use GC if MSGPEEK occurred. Igor Ushakov reported that GC purged the receive queue of a live socket due to a race with MSGPEEK, with a fix provided. This is exactly the same issue that was previously fixed in the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftsetrbtree: Fixed an issue with overlapping expiration walks. The lazy garbage collection during insertion, which should remove entries when the timeout occurs, fails to properly release the remaining part of the...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: Wait for previous GC cycles when removing a port. The syzbot encountered a use-after-free issue1. This issue occurs because the bridge does not ensure that all previous garbage collection cycles are completed...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fixed a race condition between namespace cleanup and garbage collection for the list:set type. Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and garbage collection of...
Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10
In the Linux kernel, the following vulnerability has been resolved: iouring/afunix: Defer the garbage collection of registered files to iouring’s responsibility. Instead of having unixgc handle the registered files of iouring, we want iouring to handle them itself. The key here is to consider the...
FLAIR
インシデントレスポンスのためのF-Secure Lightweight Acquisition（FLAIR） このドキュメントでは、FLAIR取得スクリプトの目的と基本的な操作について説明します。 目的 クライアント環境でのインシデント調査中に、IRチームが環境全体からアーティファクトを収集するために利用できるEDRが導入されていない場合があります。FLAIRは、対象ホストから多数の主要なアーティファクトを半自動で取得するために作成されました。...
ESFang
ESFang これは、macOS環境からEndpointSecurity Framework（ESF）イベントをモジュール単位で消費するために考案されたツールです。これは、既存のツールで遭遇した、サイレントなデータ欠落、厳格なイベントタイプ消費、代替データイベントタイプのサポート不足、ファイルアクセスハンドラの過負荷などの問題を克服するための私の試みです。 このツールは、Chris...
macOSTriageCollectionScript
macOSTriageCollectionScript macOS用のトリアージデータ収集スクリプトです。sysdiagnoseを利用し、いくつかの追加機能を加えて、調査に役立つトリアージデータを収集します。 このスクリプトは何を収集するのか？ 収集されるデータには以下が含まれます： sysdiagnose ：macOS/iOSオペレーティングシステムの各種バージョンに搭載されているユーティリティで、「システム全体の診断情報」を収集します。ここでは主に、収集されるログファイルとライブデータに使用されます。...
CVE-2023-24288
A flaw was found in Portable Puzzle Collection. A local attacker could exploit this vulnerability by creating an excessive amount of save states. This could lead to a Denial of Service DoS, making the application unavailable to legitimate users. Mitigation Mitigation for this issue is either not...
CVE-2023-24291
A flaw was found in Portable Puzzle Collection. A buffer overflow vulnerability exists when processing the record length parameter. A local attacker could exploit this flaw, with high attack complexity, to trigger a denial of service, making the application unavailable. Mitigation Mitigation for...
Security update for ansible-core
This update for ansible-core fixes the following issues: CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
Concierge
Concierge Toolkit: 物理アクセス制御の識別と悪用 Concierge Toolkit は、物理アクセス制御および監視システムの識別と悪用を支援するためのさまざまなスクリプトとリソースのコレクションです。 Concierge は現在、以下のベンダー向けのテストおよび/またはエクスプロイトを含んでいます: HID AMAG Mercury Security OEM Mercury、Lenel、Honeywell など 汎用/ベンダーニュートラル インストール Concierge モジュールには libsnmp-dev が必要です: root@kitploit: apt-ge...