Malicious code in my-private-pkg (PyPI)

Version 99.1.1 of my-private-pkg executes a custom setuptools install hook while a wheel is built. The hook launches myprivatepkg/index.py, which collects the current username, working directory, hostname, resolved local IP address, operating system, and machine architecture, then attempts to POS...

CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

UBUNTU-CVE-2026-97547

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode flag from the file that currently has it to the other file, as long ...

CVE-2026-97547

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode flag from the file that currently has it to the other file, as long ...

Linux Distros Unpatched Vulnerability : CVE-2026-97547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode...

Linux Distros Unpatched Vulnerability : CVE-2026-98161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error...

CVE-2026-97542

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

Linux Distros Unpatched Vulnerability : CVE-2026-98137

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: treat any nonzero dio zero-range return as an error ntfsdiozerorange returns either 0 or a negative errno from blkdevissuezeroout %NASLMINLEVEL 80900 C...

UBUNTU-CVE-2026-98137

In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfsdiozerorange returns either 0 or a negative errno from blkdevissuezeroout; it never returns a positive value. The zeroing failure check in ntfsattrfallocate therefore...

UBUNTU-CVE-2026-97542

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

CVE-2026-98137

In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfsdiozerorange returns either 0 or a negative errno from blkdevissuezeroout; it never returns a positive value. The zeroing failure check in ntfsattrfallocate therefore...

UBUNTU-CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

CVE-2026-98124

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through server-side range operations. These operations discard the affected...

Debian dla-4796 : evolution-data-server - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4796 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/...

cve-2021-27065

도난 데이터 검색을 기반으로 새로운 코드를 추가하거나 기존 코드를 계속 수정할 예정입니다 시스템이 손상된 경우, 이 스크립트가 문제를 해결해 주지는 않습니다! 이 스크립트는 시스템에서 발생한 일의 범위를 알게 되는 것 외에는 아무런 이점을 제공하지 않습니다. 그렇기 때문에 저는 시스템에서 도난당할 수 있었던 데이터를 조사하는 데 사용하고 있는 스크립트를 여기에 계속 추가할 것입니다. 유용한 링크 1...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + 勒索软件 免责声明 本项目仅供教育目的。本项目使用了来自 rkshrksh/2048-Game 和 kangtastic/cve-2019-2215 的代码。 项目描述 本项目是新加坡理工大学移动安全模块的一部分。项目在6周内完成，目的是开发一个恶意的安卓应用程序。通过这样做，它帮助我们了解了安全机制在 Android 操作系统中的实现方式，以及如何利用 OWASP Mobile Top 10:2017 M8 - 代码篡改。 该项目是一个概念验证，用于展示一个自定义编写的勒索软件，它利用 AES 加密、武器化...

chall2026-telneted

@Hack 2026: Telneted 著者: Harsh. カテゴリ : Pwn 解決数 : 34/120 タグ : beginner プロトコル : telnet 偵察チームがエイリアンのネットワーク上で別のエンドポイントを発見しましたが、どうやら自分たちのツールでは接続できないようです。 ネットワークキャプチャによると、ユーザー 'astrax' がそのエンドポイントを使用して秘密データをシステムに密輸したり外部に持ち出したりしていることがわかります。...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 THMルーム「Vulnerability Capstone」& CVE-2018-16763のエクスプロイトスクリプトに関する解説。 クレジット 私はこの脆弱性の発見について功績を主張しません。以下の方々に感謝します。 脆弱性発見: 0xd0ff9 TryHackMe ルーム & 作者: https://tryhackme.com/room/vulnerabilitycapstone https://tryhackme.com/p/cmnatic 参考文献:...

CVE-2022-0236

CVE-2022-0236 WP Import Export WordPressプラグインは、/includes/classes/class-wpie-general.php ファイルにあるダウンロード関数 wpieprocessfiledownload に対する機能チェックが欠如しているため、認証されていない機密データの漏洩に対して脆弱です。これにより、認証されていない攻撃者が脆弱なサイトからインポートまたはエクスポートされた情報をダウンロードでき、ユーザーデータなどの機密情報が含まれる可能性があります。これはバージョン3.9.15まで（およびそれを含む）に影響します。 要件...

AntiCropalypse

2023年3月31日更新 本日より、DiscordのCDNはPNGの転送中に末尾のデータを除去するようになりました。そのため、古いアップロードもaCropalypseの脆弱性から安全になりました。したがって、このボットはもはや必要ありませんが、ユーザーがアーカイブ画像をダウンロードできるよう、オンラインのまま維持されます。 ボットの元のREADMEは以下にあります。 AntiCropalypse...