Astra Linux – Vulnerability in Linux

A issue was discovered in the kernel of OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can exploit this to inject arbitrary network packets, regardless of the network configuration...

Astra Linux – Vulnerability in Mariadb 10.3

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. The supported versions affected are 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. This vulnerability is difficult to exploit; it allows low-privilege attackers with network access via multiple protocols to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tun: Unlinking the NAPI from the device upon destruction. Syzbot identified a race condition between the tun file and the device destruction process. NAPIs reside in the structtunfile structure, and this structure may be...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fixed a crash in the cmaneteventworkhandler function. The struct rdmacmid structure has a member “struct workstruct network”, which is reused to queue cmaneteventworkhandler functions onto the cmawq queue. The crash1 ca...

Astra Linux – Vulnerability in GraphicsMagick

GraphicsMagick version 1.3.35 has a heap-based buffer overflow in the ReadMNGImage function in the coders/png.c file...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: sctp: Avoid a UAF situation during the teardown of a network namespace when authenable is set to true. The procsctpdoauth function updates the SCTP control socket after changing net.sctp.authenable. This function retrieves the...

Astra Linux – Vulnerability in nss

A flaw was discovered in the implementation of CHACHA20-POLY1305 in NSS versions prior to 3.55. When using multi-part Chacha20, it could lead to out-of-bounds reads. This issue was addressed by explicitly disabling multi-part ChaCha20 which was not functioning correctly and enforcing strict tag...

phantom-grid

Phantom Grid - 엔터프라이즈 제로 트러스트 네트워크 액세스 ZTNA Phantom Grid는 차세대 제로 트러스트 네트워크 액세스ZTNA 및 능동 방어 시스템입니다. 커널 수준eBPF과 애플리케이션 수준mTLS 모두에서 동작하여 Linux 서버를 강력하고 기만적인 공격 표면으로 변환합니다. 현대 기업을 위해 설계되었으며, 권한이 부여된 인원에게는 높은 접근성을 유지하면서 네트워크 스캐너로부터 인프라의 가시성을 크게 줄이도록 설계되었습니다. 핵심 기능 eBPF 네트워크 클로킹 및 SPA 레이어 4 제로 트러스트 중요한...

CVE-2026-22557-check

Инструмент оценки уязвимости CVE-2026-22557 Безопасно определяет, уязвим ли контроллер UniFi Network Application для CVE-2026-22557, не вызывая никаких нарушений. Смотрите полный анализ в блоге Bishop Fox. Описание CVE-2026-22557 — это неаутентифицированная уязвимость обхода пути в гостевом...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...

kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

cantina

보관됨ARCHIVED. 이 프로젝트는custom-oscp-tooling으로 이동했습니다. 모든 Cantina 코드는 이제 Star Wars enum/advisor 도구 모음과 함께 그곳에 있습니다. 이 저장소는 기록 보존을 위해 읽기 전용으로 유지됩니다. 새 위치: https://gitlab.com/WattoCyber/custom-oscp-tooling 실행: 해당 저장소에서 python tools/cantina.py Cantina 한눈에 보기 | ---|--- 정의| Cantina는 OSCP 시험에 적합한OSCP-legal...

CVE-2026-0073-Android-adbd-authentication-bypass

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...

kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...

EUVD-2026-92315

P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...

EUVD-2026-92295

Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code as the P4 Search service account, potentially leading to compromise of the connected P4 Server...

CVE-2026-4480-POC

CVE-2026-4480 - Samba 인쇄 하위 시스템 원격 코드 실행 개요 Samba 인쇄 하위 시스템에 영향을 미치는 치명적인 원격 코드 실행RCE 취약점인 CVE-2026-4480 과 관련된 개념 증명 및 연구 자료입니다. 이 취약점은 %J 치환 매개변수를 통해 구성된 print command로 전달되는 사용자 제어 인쇄 작업 설명의 부적절한 처리로 인해 발생합니다. 취약점 세부 정보 CVE: CVE-2026-4480 구성 요소: Samba 인쇄 하위 시스템 유형: OS 명령 주입 CWE-78 영향: 원격 코드 실행 공...

CVE-2026-41089-Netlogon-RCE

🛡️ CVE-2026-41089-Netlogon-RCE - 중요한 Windows 서비스 보안 취약점 분석 이 저장소는 CVE-2026-41089로 알려진 Netlogon 취약점을 분석하고 테스트하기 위한 도구를 제공합니다. 이 도구는 보안 전문가가 자신의 Windows 도메인 컨트롤러가 이 특정 원격 코드 실행 결함으로 인한 위험에 노출되어 있는지 식별하는 데 도움을 줍니다. 📋 위험 이해하기 Netlogon 서비스는 Windows 도메인 환경 내에서 사용자 인증 및 네트워크 트래픽을 관리합니다. 이 서비스의 결함으로 인해...

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...