413 matches found
CVE-2026-31431-CopyFail-Lab
CVE-2026-31431「Copy Fail」— LinuxカーネルLPEラボ 概要 このリポジトリは、CVE-2026-31431（Copy Fail） の完全なラボ調査を文書化したものです。 これは、2026年4月29日に公開された、Linuxカーネルの algifaead 暗号モジュールにおける 高深刻度のローカル権限昇格（LPE）脆弱性です。 CVSSスコア: 7.8（高） テストカーネル: 6.18.12+kali-amd64 ラボ実施日: 2026年5月11日 内容 ファイル| 説明 ---|---...
cve_2023_38831_scanner
CVE-2023-38831 스캐너 개요 CVE-2023-38831 스캐너는 WinRAR 설치에서 CVE-2023-38831 취약점의 존재를 탐지하고 분석하도록 설계된 고급 사이버 보안 도구입니다. 이 프로젝트는 파일 무결성 검사, 프로세스 메모리 스캔, 네트워크 트래픽 분석 및 샌드박스 실행을 통합한 다계층 취약점 탐지 방식을 구현합니다. 기능 취약점 탐지 : WinRAR 설치에서 CVE-2023-38831 취약점을 스캔합니다. 파일 무결성 검사 : WinRAR 실행 파일의 무결성을 검증합니다. 프로세스 메모리 스캔 : 실행 ...
tarian
Tarian Kubernetes에서 실행되는 애플리케이션을 신뢰할 수 있는 프로세스와 신뢰할 수 있는 파일 서명을 미리 등록하여 악의적인 공격으로부터 보호하세요. Tarian은 알 수 없는 프로세스와 등록된 파일의 변경 사항을 감지하여 경고를 보내고 자동 조치를 취합니다. Kubernetes 환경을 랜섬웨어로부터 지키세요! 우리는 이 프로젝트를 오픈소스로 유지하여 사랑하는 Kubernetes 생태계에 대한 공격에 맞서 싸우고자 합니다. 지속적인 기여를 통해 커뮤니티가 함께 위협에 대응할 수 있습니다. Tarian은 어떻게...
wazuh
Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...
asclepius
Asclepius Asclepiusはファイルを復元し、その復元可能性を能動的にテストすることでバックアップの整合性を検証します。メタデータを信頼する代わりに、実際のファイル形式（ドキュメント、画像、動画、アーカイブ、メール）を解析し、バックアップが実際に読み取り可能で安全に使用できることを確認します。 インストール git clone https://github.com/matank001/asclepius cd asclepius uv sync 追加の依存関係 FFmpeg 動画検証用 macOS brew install ffmpeg Ubuntu/Debian sudo...
fim-ebpf
FIM-eBPF: eBPFによるファイル完全性監視 Linux上でファイル作成および変更イベントを監視する軽量なeBPFプログラムです。このツールはeBPF（Extended Berkeley Packet Filter）を活用して、カーネルから直接ファイル操作をトレースし、最小限のオーバーヘッドで高性能な監視を提供します。 機能 カーネルレベルの監視 : カーネルから直接ファイル操作（touch、nanoなど）をトレースします。 CO-RE対応 : 対応するカーネル（Kernel 5.x以降）上でCompile Once – Run Everywhere CO-RE...
Sentora
Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...
Important: Red Hat Security Advisory: OpenShift File Integrity Operator bug fix and enhancement update
An updated OpenShift File Integrity Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift File Integrity Operator v1.5.0 is now available. See the documentation for bug fix information:...
GHSA-5WP5-5229-5G6Q NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection
NLTK's package downloader in nltk/downloader.py does not verify file integrity after download and before extraction. The download flow at lines 789-825: 1. File is downloaded to a temp path via HTTP 2. os.replacetmpfilepath, filepath moves it to the final location line 799 3. Extraction begins vi...
SUSE CVE-2026-63310
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
AIDE 0.19.4
AIDE Advanced Intrusion Detection Environment is a free replacement for Tripwiretm. It generates a database that can be used to check the integrity of files on server. It uses regular expressions for determining which files get added to the database. You can use several message digest algorithms ...
Security Bulletin: Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components
Summary Langflow contains two authenticated vulnerabilities that allow an attacker to write or delete arbitrary files on the server filesystem accessible to the Langflow process identity. The SaveToFileComponent constructs file paths directly from the attacker-controlled file name field supplied...
ossec-hids v4.3.0
OSSEC v4.2.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...
Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)
The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...
CVE-2026-74596
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
EUVD-2026-64533
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
CVE-2026-63310
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PYSEC-2026-3729
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
PYSEC-2026-3729
NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module. Attackers can perform man-in-the-middle attacks or DNS poisoning to inject malicious package contents that are extracted without validation...
