kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

RLSA-2026:59737 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64...

CVE-2026-72813

A flaw was found in actix-files. This vulnerability allows a remote attacker to trigger a Denial of Service DoS by sending a GET request with an empty Range header when the application is configured to abort on panic. This can lead to the application crashing on demand...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

CVE-2026-63520

CVE-2026-63520 RCE por tipo inseguro no SharePoint + cadeia CVE-2026-55040 RCE não autenticado no Microsoft SharePoint Server. Nenhuma credencial necessária. Stephen Fewer Rapid7 demonstrou a CVE-2026-55040 no Pwn2Own Berlin 2026. A Rapid7 então descobriu a CVE-2026-63520 durante pesquisas de...

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two men...

cPanelSniper

cPanelSniper CVE-2026-41940 — Bypass dell'autenticazione cPanel & WHM tramite iniezione CRLF nel file di sessione Catena di exploit in 4 fasi · Shell WHM interattiva · Scanner di massa · Pronto per pipeline · Solo stdlib Panoramica cPanelSniper è un framework di exploitation mirato per...

cPanelSniper

cPanelSniper CVE-2026-41940 — Bypass dell'autenticazione cPanel & WHM tramite iniezione CRLF nel file di sessione Catena di exploit in 4 fasi · Shell WHM interattiva · Scanner di massa · Pronto per pipeline · Solo stdlib Panoramica cPanelSniper è un framework di sfruttamento mirato per...

cve-2026-31431

CVE-2026-31431 — "Copy Fail": Escalatione dei Privilegi Locali nel Kernel Linux algifaead CISA KEV | CVSS 7.8 ALTO | Interessa i kernel Linux 4.14 – inizio 2026 9 anni Indice 1. Sintesi Esecutiva 2. Valutazione del Rischio 3. Analisi Tecnica Approfondita 4. Metodologia di Attacco — Red Team 5...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Escalação de Privilégio Local no algifaead do Kernel Linux CISA KEV | CVSS 7.8 ALTO | Afeta kernels Linux 4.14 – início de 2026 9 anos Índice 1. Resumo Executivo 2. Avaliação de Risco 3. Análise Técnica Detalhada 4. Metodologia de Ataque — Red Team 5. Detecção e...

block-copyfail

Zusammenfassung CVE-2026-31431 „Copy Fail" ist eine Privilege-Escalation-Schwachstelle im Linux-Kernel in der kryptografischen Schnittstelle algifaead. Ein Angreifer nutzt AFALG-Sockets mit dem Algorithmus authencesn und splice, um beliebige Dateien im Kernel-Page-Cache zu korrumpieren –...

Principal-HackTheBox

HackTheBox — Principal Schwierigkeit: Mittel Betriebssystem: Linux Plattform: HackTheBox Übersicht Webanwendung, die pac4j-jwt v6.0.3 ausführt — anfällig für CVE-2026-29000. Der öffentliche RSA-Schlüssel ist unauthentifiziert über einen JWKS-Endpunkt zugänglich und kann verwendet werden, um ein...

CVE-2026-41940-cPanel-Auth-Bypass-Exploit

CVE-2026-41940: Análise de Bypass de Autenticação no cPanel/WHM Visão Geral da Vulnerabilidade A CVE-2026-41940 é uma vulnerabilidade crítica de bypass de autenticação no cPanel & WHM que afeta todas as versões atualmente suportadas. Ela permite que um atacante não autenticado contorne a...

keyhog v0.5.86

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...

New Instagram and Facebook rules set a default two-hour limit for teens

Meta decided that discretion was the better part of valor on Wednesday, agreeing to settle a landmark child safety case for up to $17 billion. The agreement would introduce a default two-hour daily limit for teens on Instagram and Facebook, overnight restrictions, and a range of other protections...

CVE-2026-41940

CVE-2026-41940 Auto Exploit Panoramica CVE-2026-41940 è un proof-of-concept PoC che mira a cPanel/WHM. Questo exploit dimostra un bypass di autenticazione non autenticato utilizzando l'iniezione CRLF per divulgare i token di sicurezza e ottenere accesso a livello root all'interfaccia WHM,...

GhostShell

GhostShell CVE-2026-31431 — Escalatazione dei Privilegi Locali tramite Corruzione della Page Cache del Kernel Linux GhostShell è uno strumento di escalation dei privilegi locali che sfrutta una vulnerabilità nell'implementazione AEAD authencesn del kernel Linux per ottenere una shell di root da u...

droidground v1.0.14

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

LSN-0121-1: Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipcmsgsendrequest ipcmsgsendrequest waits for a generic netlink reply using an ipcmsgtableentry on the stack. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix...