gradle-static-analysis-plugin

OBSOLETO Complemento de análisis estático de Gradle ⚠️ Se mantiene un fork de este proyecto en https://github.com/GradleUp/static-analysis-plugin/ Migre usando el id de complemento com.gradleup.static-analysis. Un complemento de Gradle para aplicar fácilmente la misma configuración de herramientas...

PANIX

PANIX - Persistence Against NIX PANIX is a powerful, modular, and highly customizable Linux persistence framework designed for security researchers, detection engineers, penetration testers, CTF enthusiasts, and more. Built with versatility in mind, PANIX emphasizes functionality, making it an...

SoliditySecurity

What's this This post aims to be a relatively in-depth and up-to-date introductory post detailing the past mistakes that have been made by Solidity developers in an effort to prevent future devs from repeating history. Table of Contents 1. Re-Entrancy The Vulnerability Preventative Techniques...

Audix

root@kitploit: | / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| is a PowerShell tool to quickly configure the Windows Event Audit Policies for monitoring & incident response. Please note: This tool will only change the local security policy. If applied to a host with a GPO setting, it is...

PT-2026-90479

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering trusted tpm exit drops the TPM chip reference and frees the digest array before unregistering the trusted key type. key type lookup holds key types sem for reading until the key operation...

PT-2026-90477

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aa vec unique null terminates at vecn - dups when VEC FLAG TERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

PT-2026-90138

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc get and of icc get by index In of icc get by index and icc get, if the dynamic allocation for path-name fails via kasprintf, the error handling path directly calls kfreepath to free the pat...

PT-2026-90144

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk store and kek store sk store and kek store strip a trailing newline from the sysfs write before allocating the key buffer: length = count; if buflength - 1 == ' ' length--; bioscf...

PT-2026-90058

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack file send sigiotask When inspecting the credentials of another task, objective credentials -real cred, accessed with task cred must always be used. Accessing -cred on a non-current task is forbidden...

PT-2026-90316

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify pre content builds its file range on the triggering task's stack. fanotify alloc perm event saves a pointer to range.pos in the heap-allocated permission event so copy rang...

PT-2026-90132

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp convert zc to xdp frame clones an XSK packet into an order-0 page and advertises PAGE SIZE as its frame size. It allows the copied frame to occupy the page tail needed by skb shared info and...

PT-2026-90224

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma set ib path ucma set ib path calls ucma event handler straight from the write path, without the handler lock that keeps ctx-file stable while a uevent is queued. The handler re-reads ctx-file f...

PT-2026-90465

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR PTR to kthread stop event test stuff calls kthread run and unconditionally passes the returned task struct pointer to kthread stop. kthread run returns an error pointer such as ERR PTR-ENOMEM when...

PT-2026-90462

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as named data. Both are added to tr-hist vars by save hist...

PT-2026-90475

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup when scanning task stacks Patch series "mm/kmemleak: avoid soft lockup when scanning task", v3. kmemleak scan scans every task stack under one rcu read lock with no reschedule point, which can trip...

PT-2026-90111

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smc llc srv add link smc llc srv add link keeps add llc pointing into the queue entry: add llc = &qentry-msg.add link; smc llc.c:1482 ... smc llc save add link infolink new, add ll...

PT-2026-90424

In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl cb session to fix use-after-free on session teardown After a DESTROY SESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpc task that dereferences clp-cl cb...

PT-2026-90271

In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb may pull mpls select multipath calls mpls multipath hash to choose a nexthop when an MPLS route has multiple nexthops. While walking the MPLS label stack, the hash routine caches hdr for the current...

PT-2026-90140

In the Linux kernel, the following vulnerability has been resolved: io uring/waitid: honor task work cancellation io waitid cb may run through the fallback task work path when task work add can no longer queue work to the originating task. The fallback runs from a kworker and io uring marks such...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107271 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4xattrinodedecrefall' we should ignore xattrs entrie...