flare-fakenet-ng

root@kitploit: | /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 是面向恶意软件分析人员和渗透测试人员的下一代动态网络分析工具。它是开源的，专为最新版本的 Windows（以及...

CVE-2026-90401

This vulnerability affects the Linux kernel md (multiple device) subsystem , specifically the raid1, raid10, and raid456 personalities. The root cause is that REQ_NOWAIT support in these personalities is fundamentally incomplete: during a write, one mirror may succeed while another returns -EAGAI...

EUVD-2026-82062

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

CVE-2026-90401 md: remove REQ_NOWAIT support from raid1/10/456

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations

A flaw was found in Apache Tomcat. Insufficient technical documentation regarding the secure configuration of the EncryptInterceptor component may lead to deployments with insecure settings. This vulnerability could allow an attacker to exploit misconfigurations that arise from unclear guidance,...

Dependency Scanning

依赖与许可证扫描组件 该组件生成CycloneDX软件物料清单，GitLab使用它来识别项目的依赖项及其许可证。此CycloneDX软件物料清单与GitLab分类法兼容。此外，该组件能够根据项目依赖项中检测到的漏洞生成依赖扫描报告。 要求 此CI/CD组件需要GitLab的依赖扫描功能，这是GitLab Ultimate的一个特性。 用法 将以下代码片段添加到您的.gitlab-ci.yml中，以使用默认配置运行dependency-scanning作业。 root@kitploit: include: - component:...

CVE-2026-90279 md/raid5: round bitmap stripes with sector division

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5bitmapsectormap aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunksectors multiplied by the number of data...

CVE-2026-90279

CVE-2026-90279 affects the Linux kernel md/raid5 subsystem, specifically the raid5_bitmap_sector_map() function. The root cause is that this function aligns array ranges to full RAID5 stripe widths using round_down()/round_up() mask-based arithmetic, which fails when the stripe width (chunk secto...

EUVD-2026-81872

In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5bitmapsectormap aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunksectors multiplied by the number of data...

CVE-2026-90270

CVE-2026-90270 affects the arm_mpam driver in the Linux kernel . A use-after-free occurs when a user unbinds the last Memory System Component (MSC) for a given component, causing the corresponding mpam_component to be freed. A subsequent read of the schemata file in the resctrl filesystem then ac...

CVE-2026-90270 arm_mpam: Disable driver unbind to avoid UAF

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

EUVD-2026-81863

In the Linux kernel, the following vulnerability has been resolved: armmpam: Disable driver unbind to avoid UAF When a user unbinds an MSC and that MSC is the only MSC left for a component then the corresponding mpamcomponent will be freed. If the user then goes on to read the schemata file in th...

CVE-2026-90231 apparmor: fix unconfined user namespace restriction forced stack

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

CVE-2026-90231

CVE-2026-90231 affects the Linux kernel's AppArmor security module. When a task is already confined by a profile stack, the unprivileged transition restriction on the unconfined profile is not correctly applied, which can result in a confinement escape if two transitions through an unconfined pro...

EUVD-2026-81824

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

CVE-2026-90179

AppArmor in the Linux kernel is affected by a deadlock triggered when a process uses change_hat in complain mode and the target hat does not exist. The root cause is a lock-ordering conflict : change_hat() holds a lock while searching the hat list, but aa_new_learning_profile() attempts to acquir...

CVE-2026-90179 apparmor: fix deadlock in complain-mode change_hat

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode changehat The use of changehat when in complain mode can cause a deadlock when the hat doesn't exist and a new learning profile is created for the missing profile. This is because changehat...

EUVD-2026-81772

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode changehat The use of changehat when in complain mode can cause a deadlock when the hat doesn't exist and a new learning profile is created for the missing profile. This is because changehat...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi MFSA 2026-93, bsc1280371 CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the...