Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed a potential index out of bounds issue in the color transformation function. The issue could occur when the index ‘i’ exceeds the number of transfer function points TRANSFERFUNCPOINTS. The fix includes a...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

EUVD-2026-92255

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw exists in the X.509 client-certificate authenticator of Keycloak , an identity and access management solution. When configured to check certificate revocation via CRL Distribution Points or OCSP , the server may process a specially crafted certificate provided by an attacker. This causes K...

CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301 Keycloak-services: keycloak-services: blind ssrf via x.509 authenticator fetching attacker-controlled crl-dp/ocsp urls

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

opencart-reward-free-checkout

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opencart-reward-free-checkout opencart-reward-free-checkout OpenCart 4.1.0.4 - OpenCart Ltd CVE-2025-15116 era una carrera de cupones hasta la 4.1.0.3. En la 4.1.0.4, coupon.save elimina paymentmethod cuando el cupón...

EUVD-2026-91444

ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the zlistunifiedreceivers RPC handler, which calls expect on Sapling receiver parsing that fails for Unified Addresses carrying invalid Jubjub points. Authenticated RPC clients can submit such an...

sccm-http-looter

SCCM HTTP Looter Cómo funciona Los puntos de distribución DP de SCCM son los servidores que Microsoft SCCM utiliza para alojar todos los archivos usados en instalaciones de software, parches, implementaciones de scripts, etc. Por defecto, estos servidores permiten el acceso mediante SMB TCP/445 y...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CaptainHook

Captain Hook ¿Qué es? El propósito de esta herramienta es rastrear las entradas del usuario, para encontrar puntos de inyección en métodos sensibles como java.lang.Runtime.exec, java.sql.Statement.executeQuery, ... así como las mutaciones en estas entradas entre el punto de inyección y la llamada...

veeam-velociraptor

Artefactos de Velociraptor para Veeam Backup & Replication - PoC Este repositorio contiene una colección de artefactos de Velociraptor que actúan como prueba de concepto para un pipeline de análisis forense remoto de Veeam Backup & Replication: artifacts/ contiene las definiciones de los artefact...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781350676)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781350676 advisory. - A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...

AlmaLinux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1781350676)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781350676 advisory. - A flaw was found in Samba's handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing...

AZL-105903 CVE-2026-35189 affecting package shim-unsigned-x64 16.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105870 CVE-2026-35189 affecting package rust 1.96.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

DEBIAN-CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

ALPINE-CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...