peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

SOC335-CVE-2024-49138-Exploitation-Detected

権限昇格ケース - SOC335-CVE-2024-49138-エクスプロイト検出 アラート概要 影響を受けたホスト名: Victor トリガープロセス: scohost.exe 親プロセス: C:\Windows\System32\WINDOWSPOWERSHELL\V1.0\powershell.exe ファイルハッシュ: b432dcf4a0f0b601b1d79848467137a5e25cab5a0b7b1224be9d3b6540122db9 トリガー理由: ハッシュに関連する異常または不審な動作パターンが特定され、CVE-2024-49138 の悪用の可能性が示されています...

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

SOC336 - Windows OLE 零点击远程代码执行漏洞检测 CVE-2025-21298 演练 🔎 目录 1. 情境 2. 告警概览 3. 使用的工具 4. 分析 邮件安全 日志管理 代理日志 端点安全 终端历史 网络行为 进程 CVE-2025-21298 剧本 分析师备注 参考 返回顶部 情境 我们的一名员工Austin收到了一封来自可疑发件人的钓鱼邮件，他在2025年2月4日下午4:18使用Outlook打开该邮件后触发了告警。触发原因为 "检测到恶意RTF附件，带有已知的CVE-2025-21298漏洞利用模式" 。 返回顶部 告警概览 事件ID : 314 事件时间 ...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac – Check the count value of the channel specification to prevent out-of-bounds reads This patch fixes out-of-bounds reads in brcmfconstructchaninfo and brcmfenablebw402g, which occur when the count value of the...

CVE-2026-81013

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validatepasswordinput computes length = strlenbuf and then checks buflength - 1 to strip a trailing newline, without checking that length is nonzero first. Writi...

CVE-2026-80971

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

CVE-2026-81013

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validatepasswordinput computes length = strlenbuf and then checks buflength - 1 to strip a trailing newline, without checking that length is nonzero first. Writi...

CVE-2026-80971 ALSA: bcd2000: clear the URB pointers on disconnect

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect bcd2000freeusbrelatedresources frees both URBs and leaves the pointers behind: usbkillurbbcd2k-midiouturb; usbkillurbbcd2k-midiinurb; usbfreeurbbcd2k-midiouturb;...

CVE-2026-88022

creationtimestamp| type| source ---|---|--- 2026-09-11 12:45:03+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...

CVE-2026-74835

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:38+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-66357

creationtimestamp| type| source ---|---|--- 2026-09-02 12:45:27+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3...

CVE-2026-81521

creationtimestamp| type| source ---|---|--- 2026-08-28 12:45:44+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-3...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098690 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, bu...

CVE-2026-74541

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear isodata always when detaching conn from hcon When setting conn-hcon = NULL, also conn-hcon-isodata = NULL is necessary, otherwise later isoconnfree will UAF. Fix clearing of isodata in isosockdisconn Fixes...

MINI-VX3P-4Q9J-4X8M

Bulletin has no description...

PT-2026-72542

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid stale runlist element dereference in MFT writeback ntfs write mft block maps each $MFT record through the $MFT data runlist. For sub-folio clusters it looks up a struct runlist element under ni-runlist.lock, drops the...

CVE-2026-68127

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

CVE-2026-10849

creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:05+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msa36ikf3x2c 2026-08-10 02:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msp2xho7xz2o...

CVE-2026-54890

creationtimestamp| type| source ---|---|--- 2026-07-28 17:22:27+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

Linux Distros Unpatched Vulnerability : CVE-2026-64424

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netpoll: fix a use-after-free on shutdown path There is a use-after-free error on netpoll, which is clearly detected by KASAN. BUG: KASAN: slab-use-after-free ...