JLSEC-2026-1381

Mongoose is an embedded web server and network library. Priro to version 7.22, a remote unauthenticated attacker can send an HTTP request containing both Content-Length and Transfer-Encoding: chunked. The clcount and tecount checks in the mghttpparse and httpcb paths in src/http.c accept both...

CVE-2026-74667

A flaw was found in the Linux kernel's networking packet handling. Specifically, the packetparseheaders function does not consistently reset the Media Access Control MAC header for certain packet types on the PACKETQDISCBYPASS path. This can lead to an unset MAC header, causing a driver to perfor...

CVE-2026-53624

A flaw was found in the Fiber web framework's helmet middleware. This vulnerability occurs because the middleware incorrectly checks for the HTTPS protocol, preventing the Strict-Transport-Security HSTS response header from being set. This can allow an attacker to bypass security mechanisms,...

CVE-2026-45045

A flaw was found in the GoFiber web framework's BalancerForward proxy helper. This vulnerability allows a remote attacker to spoof their IP address by manipulating the X-Real-IP header. Because the Header.Add function is used instead of Header.Set, an attacker-supplied X-Real-IP value is forwarde...

CVE-2026-74597

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 tunnel error handling. A remote attacker could send a specially crafted IPv6 ICMP Internet Control Message Protocol error packet with a malformed inner destination-options header. This could lead to memory corruption within t...

CVE-2026-74701

A flaw was found in the Open vSwitch component of the Linux kernel. When a specially crafted packet with ETHPTEB protocol arrives on an ARPHRDNONE device, the keyextract function does not properly verify the Ethernet header length. This oversight allows a remote attacker to trigger a kernel bug,...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fixed the double-free of the elf header buffer. After the patch provided by b3e34a47f989 “x86/kexec: fix memory leak of elf header buffer”, the use of image-elfheaders in the error path of crashloadsegments is no longe...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Reenabling NETIFFIPV6CSUM offloading for BIG TCP packets The problematic commit disabled the hardware offloading of IPv6 packets with extension headers on devices that advertise NETIFFIPV6CSUM. This was based on the definiti...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mac80211: The issue in ieee80211scanrx involves checking the skb length. This code requires hard-coded compile-time constants for determining the header length check. Instead, a dynamic determination based on the frame type shoul...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: State corruption has been prevented in fpurestoresig. The non-compacted slowpath uses copyfromuser to copy the entire user buffer into the kernel buffer, verbatim. This means that the kernel buffer may now contain entire...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: gve: Fixed header buffer corruption with header-split and HW-GRO. The DQO RX datapath programs the headerbufaddr for each buffer-queue-descriptor at the post-time, and reads the split header back at the completion time. Both t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: The iph-ihl field was validated in the nfflowip4tunnelproto function. A sanity check was added for this field before using it to calculate the header size. This prevents out-of-bounds access and malformed IP...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ntfs: Moving the resident index root entries into an index block before updating the parent header. The ntfsirreparent function moves the resident index root entries into an index block and leaves a small root stub containing the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Centralized validation of the $INDEXROOT header. A dedicated helper function has been added to perform more stringent validation of the $INDEXROOT, and this function is used for both directory inodes and named index...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: Use dst in this direction when pushing the IPIP header. When pushing the IPIP header, the route of the other direction is used to calculate the headroom. Instead, use the route in this direction. Accessing t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of the numdests header Before accessing the numdests field of the struct batadvtvlvmcasttracker, it was attempted to check whether there is enough space in the network header. However, instead of...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: A memory leak has been fixed in ath12kwifi7dprxhverifytkipmic. In ath12kwifi7dprxhverifytkipmic, the call to ath12kdprxchecknwifihdrlenvalid may return false when the NWIFI header length is invalid. This causes the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Validating the values of the resident $INDEXROOT field during lookups. The values of the $INDEXROOT field carry index header fields that are consumed by callers after a lookup. Some callers already validate certain parts...

Improper Authentication

Keycloak is vulnerable to Improper Authentication. The vulnerability is due to improper validation of client authentication assertions, which allows an attacker with valid client credentials to supply a fake unsigned assertion header and bypass policies requiring signed JWT authentication...

stealth_call

Cos'è? Libreria header-only per Windows x64 che consente di invocare qualsiasi syscall NT senza toccare gli import di ntdll, senza lasciare stringhe nel binario e senza i soliti campanelli d'allarme che fanno impazzire gli EDR. Niente CRT. Niente STL. Niente IAT. L'intero progetto compila a circa...