ph0neutria

ph0neutria ph0neutria Malware-Crawler v1.0.1 https://github.com/phage-nz/ph0neutria Hinweis: Dieses Projekt wird nicht aktiv gewartet. Über ph0neutria ist ein Malware-Zoo-Ersteller, der Proben direkt aus der freien Wildbahn bezieht. Alles wird zur einfachen Zugänglichkeit und Verwaltung in Viper...

CyberMeowfiaNS

CyberMeowfia Android-Kernel-Forschung Dieses Repository dokumentiert Methoden, Werkzeuge und Fallaufzeichnungen für die Analyse von Android-Kernel-Proben und folgt dabei der Forschungslinie CyberMeowfia. Die beiden Routen sind CVE-2026-43499 und CVE-2026-43074. Es ist eine...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fixed integer overflow in sample size validation The wavefrontsendsample function has a problem with integer overflow when validating sample size. The header-size field is of type u32, but it is cast to int for...

Astra Linux – Vulnerability in GhostScript

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in the sampleddatasample function called from sampleddatacontinue and interp...

CVE-2024-10605

Betroffene Version: BloodBank Management System : 1.0 Schwachstelleninformationen: Schwachstellentyp: Cross Site Request Forgery CSRF Schweregrad: HOCH Status: Nicht gepatcht Verwundbarer Endpunkt: Pfad: file/request.php Schwachstellenbeschreibung: Auf diesem Endpunkt /file/request.php liegt eine...

BruteRatel-DetectionTools

BruteRatel-DetectionTools Eine Sammlung von Tools und Regeln zum Decodieren von Brute Ratel C4-Badgers Alle Tools und Regeln basieren auf Beispielen, die von PaloAlto in ihrem Bericht https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ identifiziert wurden. Yara-Regel Die Yara-Regel wurde...

GHSA-3HV7-MJH2-FV65 vulnerabilities

Vulnerabilities for packages: litellm, airflow, jupyterhub-k8s-singleuser-sample, mitmproxy, tensorflow-gpu-jupyter...

GHSA-C2M8-H5V5-343R vulnerabilities

Vulnerabilities for packages: litellm, airflow, jupyterhub-k8s-singleuser-sample, mitmproxy, tensorflow-gpu-jupyter...

GHSA-CHX6-46F5-W4VP vulnerabilities

Vulnerabilities for packages: litellm, airflow, jupyterhub-k8s-singleuser-sample, mitmproxy, tensorflow-gpu-jupyter...

CLEANSTART-2024-IG86990 inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec

Security vulnerability affects the ffmpeg4 package. An inconsistent bits-per-sample value in the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1777394739)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777394739 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and...

Improper Validation of Array Index

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Array Index via unvalidated stoptokenids on the OpenAI-compatible POST /v1/completions and POST /v1/chat/completions endpoint...

EUVD-2026-86479

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

CVE-2026-98016

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in samplerestoreput Concurrent teardown of TC sample rules sharing the same restore context may re-read restore-count after dropping restorelock. At that point another thread may already have...

CVE-2026-97230

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

CVE-2026-97230: Embedded Malicious Code

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...

Malicious code in halali-sample (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16534 Malicious code in halali-sample (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2026-83900

MISP contains a stored cross-site scripting XSS vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice directed at site administrators. In the...

PYSEC-0000-CVE-2026-93840

vLLM before 0.29.0 validates allowedtokenids against tokenizer length instead of model output logits width in SamplingParams.validateallowedtokenids. Attackers can supply token IDs above the output vocabulary that pass validation, causing LogitBiasState to corrupt GPU logits state and allow...