TempRoot-Huawei

TempRoot-Huawei Temporary root for Huawei hardened kernel via CVE-2019-2215 This code is written for P20 Pro CLT-AL00, and kernel offset is taken from firmware with build fingerprint: 'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' Background Like Samsung's KNOX, Huawei adde...

sift-hardened

sift-hardened Drop-in replacement for sift 17.1.3 that remediates CVE-2026-85625. Not affiliated with crcn/sift.js. Changes from 17.1.3 Query keys are enumerated with Object.keys own properties only, so a polluted Object.prototype.$where is not treated as an operator. String $where values are...

minimal

139 small, hardened container images. Free, MIT-licensed, signed, and rebuilt daily. Browse the catalog → Quick start docker pull ghcr.io/rtvkiz/minimal-python:latest No account needed. Every image has a :latest-dev companion with a shell and toolchain for debugging and multi-stage builds. docker...

kernel-hardening-checker

kernel-hardening-checker formerly kconfig-hardened-check Motivation There are plenty of security hardening options for the Linux kernel. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs...

sudowp-hooks-visualizer

SudoWP Hooks Visualizer Contributors: SudoWP, WP Republic Original Authors: Stuart O'Brien, cxThemes Tags: hooks, actions, filters, developer-tool, debug, security-fork, cve-2024-6297 Requires at least: 5.8 Tested up to: 6.7 Stable tag: 1.3.2 License: GPLv2 or later Security Notice CVE-2024-6297...

Sandman

Sandman Sandman is a backdoor that is meant to work on hardened networks during red team engagements. Sandman works as a stager and leverages NTP a protocol to sync time & date to get and run an arbitrary shellcode from a pre-defined server. Since NTP is a protocol that is overlooked by many...

dasel-hardened-container

dasel v3.3.1 hardened container This is a melange package and apko container image for dasel v3.3.1 with a build-time patch for CVE-2026-33320 unbounded YAML alias expansion. The image is built entirely from a locally-produced APK - no prebuilt upstream image is used. Prerequisites Tool| Tested...

PT-2026-125556

Name of the Vulnerable Software and Affected Versions mpc-lib affected versions not specified Description A cryptographic implementation flaw in the mpc-lib library used in the MPC-based custody pipeline breaks the security guarantee of BIP32 hardened derivation. The issue occurs because the...

mpc-lib hardened derivation fails to protect ancestor isolation

Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing an attacker with a compromised lower-leve...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: mariadb10.11: mariadb10.11-3:10.11.18-4.1.2.hum1 aarch64, s390x, x8664 mariadb10.11-backup-3:10.11.18-4.1.2.hum1 aarch64, s390x, x8664 mariadb10.11-client-utils-3:10.11.18-4.1.2.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.4-0.3.hum1 aarch64, s390x, x8664 grafana13.2-13.2.4-0.3.hum1.src src Security Fixes: grafana13.2: CVE-2026-114125 CVE-2026-114126 CVE-2026-111755 CVE-2026-111756...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.8-0.4.hum1 aarch64, s390x, x8664 grafana13.1-13.1.8-0.4.hum1.src src Security Fixes: grafana13.1: CVE-2026-114125 CVE-2026-114126 CVE-2026-111755 CVE-2026-111756...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.13-0.3.hum1 aarch64, x8664 grafana12.4-12.4.13-0.3.hum1.src src Security Fixes: grafana12.4: CVE-2026-114126 CVE-2026-114125 CVE-2026-111756 CVE-2026-111755...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: brotli: brotli-1.2.1-0.1.hum1 aarch64, s390x, x8664 brotli-devel-1.2.1-0.1.hum1 aarch64, s390x, x8664 libbrotli-1.2.1-0.1.hum1 aarch64, s390x, x8664 python3-brotli-1.2.1-0.1.hum1 aarch64, s390x,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: php: php-8.5.12-1.hum1 aarch64, s390x, x8664 php-bcmath-8.5.12-1.hum1 aarch64, s390x, x8664 php-cli-8.5.12-1.hum1 aarch64, s390x, x8664 php-common-8.5.12-1.hum1 aarch64, s390x, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: bind: bind-9.20.30-0.1.hum1 aarch64, s390x, x8664 bind-chroot-9.20.30-0.1.hum1 aarch64, s390x, x8664 bind-devel-9.20.30-0.1.hum1 aarch64, s390x, x8664 bind-dnssec-utils-9.20.30-0.1.hum1 aarch64,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.15: spire1.15-1.15.5-0.2.hum1 aarch64, s390x, x8664 spire1.15-agent-1.15.5-0.2.hum1 aarch64, s390x, x8664 spire1.15-oidc-discovery-provider-1.15.5-0.2.hum1 aarch64, s390x, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentofu1.12: opentofu1.12-1.12.8-0.2.hum1 aarch64, s390x, x8664 opentofu1.12-1.12.8-0.2.hum1.src src Security Fixes: opentofu1.12: CVE-2026-111943...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.8-0.3.hum1 aarch64, s390x, x8664 grafana13.1-13.1.8-0.3.hum1.src src Security Fixes: grafana13.1: CVE-2026-33374 CVE-2026-95502 CVE-2026-15577 CVE-2026-93294...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.5: prometheus3.5-3.5.5-0.9.hum1 aarch64, x8664 prometheus3.5-3.5.5-0.9.hum1.src src Security Fixes: prometheus3.5: CVE-2026-111943...