simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

santa

Santa !NOTE 2025年現在、SantaはGoogleによってメンテナンスされていません。 既存のユーザーは、Santaの活発にメンテナンスされているフォーク（例：https://github.com/northpolesec/santa）への移行を推奨します。...

CVE-2026-90078

CVE-2026-90078 affects the Linux kernel component net/sched: act_skbmod (the TC action for modifying skb fields). Three length-calculation bugs in tcf_skbmod_act() were identified: (1) an unsafe call to skb_network_header_len() that assumes the transport header is set, which is not guaranteed at ...

DEBIAN-CVE-2026-89857

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qlanvmelsrejectiocb allocates from and advances the request ring through qla2x00allociocbs which assumes the hardwarelock is held and qla2x00startiocbs which advances the...

CVE-2026-89857

CVE-2026-89857 affects the Linux kernel qla2xxx SCSI driver, specifically the NVMe-FC path. The root cause is a missing lock : qla_nvme_ls_reject_iocb() allocates and advances the request ring assuming the hardware lock is held, but two callers—qla_nvme_xmt_ls_rsp() (NVMe-FC transport callback er...

Linux Distros Unpatched Vulnerability : CVE-2026-89857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject qlanvmelsrejectiocb allocates from and advances the request ring through qla2x00allociocbs which...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not allow relocation of partially dropped subvolumes BUG There is an internal report indicating that a balance-related transaction aborted, with the following call trace: item 85 key 594509824 169 0 itemoff 12599 itemsi...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: qrtr: The MHI channel should start after the endpoint creation. The MHI channel may generate an event/interrupt right after enabling. This can lead to two race condition issues. 1. Such events may be dropped by the...

CVE-2026-89517

A flaw was found in the Linux kernel's schedext component, which handles core scheduling. When multiple selections on the same core interleave due to a dropped lock, they can corrupt the scheduling state. This corruption can lead to a NULL dereference, tasks remaining active after being dequeued,...

CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options

A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security TLS certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently...

EUVD-2026-67300

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...

CVE-2026-17610

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...

CVE-2026-17610

CVE-2026-17610 affects SiSDK v2026.6.0 and earlier on EFR32MG24 and EFR32MG26 devices running concurrent Zigbee and Thread multiprotocol operation. The vulnerability resides in the RAIL 802.15.4 Mux , where high network traffic loads can cause a dropped ACK, leading to a denial of service (high a...

CVE-2026-17610 RAIL 802.15.4 Mux missing ACK can lead to DoS

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...

cakephp/queue's Incomplete Comparison in getUniqueId vulnerable to collisions

Impact For jobs with shouldBeUnique = true the queue plugin will generate a 'unique identifier' based on the job class, method and parameters. If user data is supplied, a malicious user could create collisions, resulting in legitimate jobs being dropped. Patches Upgrade to 2.3.1 Workarounds You c...

PT-2026-82755

In SiSDK v2026.6.0 and earlier, high network traffic loads can cause a dropped ACK leading to a denial of service. This is only present for EFR32MG24 and EFR32MG26 devices running concurrent multiprotocol Zigbee and Thread...

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

Linux Distros Unpatched Vulnerability : CVE-2026-72887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback...