soroban-poseidon 安全漏洞

Soroban-Poseidon is a Poseidon hash function library developed by Stellar for smart contracts. Soroban-Poseidon has a security vulnerability, which stems from Poseidon V1 accepting variable-length inputs without using injective padding, potentially leading to simple hash collisions...

CVE-2026-28479

OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable to collision attacks. An attacker can exploit SHA-1 collisions to cause cache poisoning, allowing one sandbox configuration to be...

CVE-2026-28479 OpenClaw < 2026.2.15 - Cache Poisoning via Deprecated SHA-1 Hash in Sandbox Configuration

OpenClaw versions prior to 2026.2.15 use SHA-1 to hash sandbox identifier cache keys for Docker and browser sandbox configurations, which is deprecated and vulnerable to collision attacks. An attacker can exploit SHA-1 collisions to cause cache poisoning, allowing one sandbox configuration to be...

CLEANSTART-2026-HT23337 flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm

Security vulnerability affects the gnupg package. A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2019-10638)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-10638 advisory. - In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003767)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003767 advisory. In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols e.g., UDP and ICMP...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000905 advisory. The xfsda3fixhashpath function in fs/xfs/xfsdabtree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001843 advisory. The CRC32C feature in the Btrfs implementation in the Linux kernel before 3.8-rc1 allows local users to cause a denial of service extended runtime of kernel code by...

MiracleLinux 4 : ruby-1.8.7.352-4.AXS4 (AXSA:2012-139:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-139:02 advisory. Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system...

RHEL 9 : krb5 (RHSA-2025:15000)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15000 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending password...

EUVD-2011-4958

Malware in sbrugna...

EUVD-2012-0231

Malware in sbrugna...

EUVD-2012-3469

Malware in sbrugna...

EUVD-2012-1073

Malware in sbrugna...

EUVD-2012-2321

Malware in sbrugna...

EUVD-2014-7154

Malware in sbrugna...

EUVD-2018-6545

Malware in sbrugna...

EUVD-2012-0901

Malware in sbrugna...

EUVD-2007-0775

Malware in sbrugna...

EUVD-2013-6222

Malware in sbrugna...