frida-ipa-extract

frida-ipa-extract This project was inspired by frida-ios-dump. Since I recently encountered problems with that tool, I decided to create frida-ipa-extract with greater robustness and additions to address problems we face today. Extract a decrypted .ipa from a jailbroken iOS device using Frida...

DEBIAN-CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

The Linux kernel contains a conflict between PSP and the TLS ULP regarding the usage of skb->decrypted and sk->sk_validate_xmit_skb(). To resolve this, PSP is made mutually exclusive with TLS ULP. The fix involves including all TCP ULPs in the sk_has_decrypt_user() check to close potential ...

CVE-2026-98274 net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

EUVD-2026-93202

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274 net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

CVE-2026-98274: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make PSP mutually exclusive with TLS ULP, the only other user of either of...

PT-2026-106603

In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb-decrypted and sk validate xmit skb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-sk validate xmit skb. Make PSP mutually exclusive with TLS ULP, the only other user of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus – Track the decryption status in vmbusgpadl. In CoCo VMs, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the shared memory being...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Pages may be leaked if setmemoryencrypted fails. In CoCo VMs, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the shared of the memory...

BIT-RABBITMQ-2026-66068 RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOGDEBUG"shutting down Shovel 'ts', ... Shovel state: tp", Name, State formats the entire state map. The 'uris' field holds plaintext URIs after credentialsobfuscation:decrypt called in...

CVE-2026-66068 RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOGDEBUG"shutting down Shovel 'ts', ... Shovel state: tp", Name, State formats the entire state map. The 'uris' field holds plaintext URIs after credentialsobfuscation:decrypt called in...

CVE-2026-66068 RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LOGDEBUG"shutting down Shovel 'ts', ... Shovel state: tp", Name, State formats the entire state map. The 'uris' field holds plaintext URIs after credentialsobfuscation:decrypt called in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus – Do not free ring buffers that cannot be re-encrypted. In CoCo VMs, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the return of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dmasetdecrypted failure In TDX, it is possible for the untrusted host to cause setmemoryencrypted or setmemorydecrypted to fail, resulting in an error and the return of decrypted/membered pages. Callers...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in Ansible Engine, affecting versions 2.7.x before 2.7.17, 2.8.x before 2.8.11, 2.9.x before 2.9.7, as well as Ansible Tower in versions 3.4.5, 3.5.5, and 3.6.3. This issue occurs when using modules that decrypt vault files, such as assemble, script, unarchive, wincopy, awss...

CVE-2026-85178 Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter

Helicone's VaultManager.getDecryptedProviderKeyById function in the GET /v1/vault/key/providerKeyId endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream...