EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4332)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fanotify: fix false positive on permission eventsCVE-2026-46150 nfsd: never defer requests during idmap lookupCVE-2026-45983 fbdev: defio:...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4057)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : i2c: stub: Reject I2C block transfers with invalid lengthCVE-2026-64191 USB: serial: mctu232: fix memory corruption with small...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-4148)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : i2c: stub: Reject I2C block transfers with invalid lengthCVE-2026-64191 USB: serial: mctu232: fix memory corruption with small...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791800936)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791800936 advisory. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedrivertest...

nanoclaw

Un asistente de IA que ejecuta agentes de forma segura en sus propios contenedores. Ligero, diseñado para ser fácilmente comprensible y completamente personalizable según tus necesidades. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agentes en Slack: una app por agente La configuración aprovisiona a...

xnuspy

xnuspy Salida del registro del kernel después de compilar y ejecutar example/open1hook.c xnuspy es un módulo de pongoOS que instala una nueva llamada al sistema, xnuspyctl, que permite enganchar funciones del kernel desde el espacio de usuario. Es compatible con iOS 13.x, iOS 14.x y iOS 15.x en...

autotimeliner

AutoTimeliner Extrae automágicamente una línea de tiempo forense de volcados de memoria volátil. AutoTimeliner ejecuta múltiples plugins de Volatility3 contra imágenes de memoria de Windows, Linux y macOS, y luego fusiona sus salidas en una única línea de tiempo CSV ordenada: Plugin de línea de...

mojo-v

Mojo-V: Computación Secreta para RISC-V Mojo-V pronunciado “mojo-five” es una nueva extensión de RISC-V que introduce capacidades de programación orientadas a la privacidad para RISC-V. Mojo-V implementa computación secreta, lo que permite una ejecución segura, eficiente y oblivious a los datos s...

memguard

MemGuard Enclave de software para almacenar información sensible en memoria. Este paquete intenta reducir la probabilidad de que datos sensibles queden expuestos mientras están en memoria. Su objetivo es ser compatible con los principales sistemas operativos y está escrito en Go puro...

CVE-2026-19738

The Bluetooth Link Layer Control Procedure LLCP implementation for Connected Isochronous Stream CIS creation retains an RX node ctx-noderef.rx, marked NODERXTYPERETAIN so it can later be reused as the host notification — on the peripheral while awaiting the Host's reply to an LLCISREQ, and on the...

CVE-2026-19736

The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...

mongobleed

mongobleed CVE-2025-14847 - Explotación de fuga de memoria no autenticada en MongoDB Un exploit de prueba de concepto para la vulnerabilidad de descompresión zlib de MongoDB que permite a atacantes no autenticados filtrar memoria sensible del servidor. Vulnerabilidad Un fallo en la descompresión...

CVE-2026-19740 Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure

The Link Layer Control Procedure LLCP implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LLPHYUPDATEIND so that it can later be reused for the host notification when the update instant is reached llcprxnoderetain in...

CVE-2026-19738 Retained RX node leak and reachable assertion in Bluetooth Controller CIS Create procedures

The Bluetooth Link Layer Control Procedure LLCP implementation for Connected Isochronous Stream CIS creation retains an RX node ctx-noderef.rx, marked NODERXTYPERETAIN so it can later be reused as the host notification — on the peripheral while awaiting the Host's reply to an LLCISREQ, and on the...

CVE-2026-18418

The zbus proxy agent IPC backend in Zephyr (specifically zbus_proxy_agent_ipc.c) is vulnerable to an out-of-bounds read when logging rejected inter-domain frames. The vulnerability occurs because the channel_name[] array in struct zbus_proxy_msg may lack NUL-termination, and the logging logic use...

CVE-2026-19736 Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths

The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...

CVE-2026-19736

The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c contains an out-of-bounds write vulnerability. The root cause is the driver passing raw byte counts to the TRNG_GetRandomData() SDK routine. On i.MX RT5xx and RT6xx parts, the SDK's health test variant performs word-granular ...

CVE-2026-19736 Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths

The NXP MCUX TRNG entropy driver in drivers/entropy/entropymcuxtrng.c passed the caller's byte count straight to the vendor SDK routine TRNGGetRandomData. On i.MX RT5xx and RT6xx parts the SDK compiles its TRNGSWHEALTHTESTS variant, which always copies whole 32-bit words and draws entropy rounded...

CVE-2026-19669

The Zephyr RTOS is vulnerable to a kernel stack overflow due to unbounded variable-length arrays (VLAs) in the z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() functions within drivers/fuel_gauge/fuel_gauge_syscall_handlers.c. An attacker can provide an unvalidated len argument via...

elfloader

Resumen elfloader es un cargador extremadamente simple para archivos ELF que genera una representación plana en memoria del ELF. Combínalo con Rust y ahora puedes escribir tu shellcode en un lenguaje adecuado, seguro y de alto nivel. Se puede usar cualquier objetivo que LLVM pueda apuntar,...