Amazon Linux 2 : ca-certificates (ALAS-2026-4045)

The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4045 advisory. The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included...

Oracle Linux 10 : thunderbird (ELSA-2026-90895)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-90895 advisory. 153.5.0-1.0.1 - Add Oracle prefs 153.5.0-1 - Update to 153.5.0 ESR 140.14.0-2 - Update to 140.14.0 ESR 140.13.0-1 - Update to 140.13.0 ESR 140.12.0-1 - Update...

Rocky Linux 9.6 [TuxCare] Security Update: delve Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793215478)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793215478 advisory. - On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not ...

Rocky Linux 10.2 [CIQ] Security Update: oci-seccomp-bpf-hook / oci-seccomp-bpf-hook-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_89752)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689752 advisory. net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 net/http: golang: golang: Denial of Servic...

Oracle Linux 8 : container-tools:ol8 (ELSA-2026-89760)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-89760 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Rebuild for CVE-2026-78667 - rebuild with updated ...

Rocky Linux 10.2 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_89761)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202689761 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Medium: ca-certificates

Issue Overview: The system certificate authority CA store in Amazon Linux, distributed via the ca-certificates RPM package, included multiple root CA certificates belonging to authorities that signed eMudhra intermediate CA certificates with weak private keys. The root CA certificates that signed...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in foucreate CVE-2026-74496 In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit neededheadroom and neededtailroom from lowerdev CVE-2026-74743 In the Linux...

honeybits

Honeybits A simple PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your production servers and workstations to lure the attacker toward your honeypots. Author: Adel "0x4D31" Karimi. The Windows version of this project: honeybits-win...

CVE-2026-98974

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local user to cause unauthorized data modification or potential privilege escalation by bypassing Copy-on-Write CoW protections. When exchanging file data ranges up to the end of a file, the file system incorrectl...

StegoCracker

Stegocracker !GitHub Repo starshttps://img.shields.io/g...

netgraph

Netgraph Netgraph is a packet sniffer tool that captures all HTTP requests/responses, and display them in web page. You can run Netgraph in your linux server without desktop environment installed, and monitor http requests/responses in your laptop's browser. Compile, Install, Run 1. go get...

wi-fi-fortress-auditor

SentinelDrift Audit wireless network resilience through passive signal intelligence, decoy trap synthesis, and predictive key-space analysis—all wrapped in a visual command deck for Linux security researchers. Overview Wireless networks are invisible rivers of data flowing through every office,...

Important: Red Hat Security Advisory: java-25-openjdk security update

An update for java-25-openjdk is now available for Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Critical: Red Hat Security Advisory: ca-certificates and nss security update

An update for multiple packages is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

MGASA-2026-0560 Updated util-linux package fixes security vulnerabilities

Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...

Updated util-linux package fixes security vulnerabilities

Additional fix for CVE-2024-28085. Local Privilege Escalation via TOCTOU in mount8 hookowner.c chmod/chown. CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount8 — Target Path Redirection. CVE-2026-53613 Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable —...

panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...