linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

dawgmon

dawgmon - 道格走廊巡逻员 摘要 该工具的名称源自《南方公园》第10季第10集，其中卡特曼扮演“道格走廊巡逻员”在学校走廊巡逻。该工具用于帮助监控基于Linux的系统自上次运行以来发生的变化。 一种使用方式是使用诸如提供的示例cronjob定期运行dawgmon，并将结果通过电子邮件发送给系统管理员。这有助于识别正在发生恶意活动的机器，并监控谁在何处安装了什么。请注意，任何严重的内核后门都可以轻松隐藏自己不被该工具检测到，因此它只是工具箱中的额外工具之一，不应完全依赖它来进行Linux机器的全面安全监控。它只是工具箱中的又一个选项。...

rsyscall

摘要 rsyscall 是一个库，它为不断增长的 Linux 系统调用子集提供了接口。 该接口具有以下特性： 进程无关 ：所有系统调用都作为进程对象上的方法进行调用，这些对象可以引用“本地”进程或我们控制下的其他进程，甚至可能位于远程主机上。 类型安全 ：许多 Linux API 的约束通常留给用户代码来强制执行，而现在它们在类型系统中被明确表示。 底层 ：任何可以通过底层 Linux API 实现的操作，都可以通过 rsyscall 实现；没有禁止或限制的操作。 有关 rsyscall 背后的概念和动机的更多细节，请阅读file:docs/conceptual.org概念介绍。 快速开...

play-go-copy-fail-cve-2026-31431

Play Go Copy Fail CVE-2026-31431 Propósito Aprender syscalls de Linux bajo nivel Portar Python y C a Golang Crear tu propio payload y explotarlo como novato Actualizar automáticamente la pty de forma manual Inspiración tgies/copy-fail-c painoob/Copy-Fail-Exploit-CVE-2026-31431 Recursos Código...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8, and iPadOS 15.7.8; tvOS 16.6, iOS 16.6, and iPadOS 16.6; macOS Ventura 13.5. It is possible for websites to potentially access sensitive user information...

Linux Distros Unpatched Vulnerability : CVE-2026-71438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's configuration...

Photon OS 5.0: Linux PHSA-2025-5.0-91-0449

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0449. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-17735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process...

Linux Distros Unpatched Vulnerability : CVE-2026-17875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

Linux Distros Unpatched Vulnerability : CVE-2026-64240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f media: rc: igorplugusb: heed coherency rules changed the control request storage fr...

Linux Distros Unpatched Vulnerability : CVE-2026-64243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: simple-mux: Fix enum control bounds check simplemuxcontrolput rejects values greater than e-items, but enum control values are zero based. For the...

Linux Distros Unpatched Vulnerability : CVE-2026-9499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not...

RHEL 8 : .NET 8.0 (RHSA-2026:41901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41901 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Linux Distros Unpatched Vulnerability : CVE-2026-57075

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syckbase64dec. The base64 decoder in the bundled...

Linux Distros Unpatched Vulnerability : CVE-2026-49854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, the optional native extension tornado.speedups implemented websocketmask...

The vulnerability of the amdgpudebugfs_vm_infoShow() function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module allows a hacker to cause a system failure. This vulnerability is related to AMD GPU cores in Linux operating systems that support Direct Rendering Infrastructure (DRI).

The vulnerability of the amdgpudebugfsvminfoShow function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c driver module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2024-12393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Core allows Cross-Site Scripting XSS.This issu...

Linux Distros Unpatched Vulnerability : CVE-2026-54371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges b...

ROS-20260629-73-0039

The vulnerability in the drivers/md/raid10.c driver for multiple Linux device types RAID and LVM involves incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-54055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protoc...