usbsnoop

usbsnoop — 2つのfentryフックを使用したライブUSB転送スニファ システム全体のUSBトラフィックをリアルタイムで色分け表示 — すべてのホストコントローラドライバが通過する2つの汎用URBチョークポイントに基づいて構築されているため、xHCI/EHCI/OHCI/dwcで動作し、コントローラごとのトレースポイントやusbmonは不要です。完全にCO-REポータブル。 fentryフック| 示す内容 ---|--- usbsubmiturb| 転送がキューされた（デバイス、エンドポイント、タイプ、ペイロード） usbhcdgivebackurb|...

zen-desktop

Zen: 包括的な広告ブロッカーとプライバシーガード プライバシーを無視する方法は、単純に、存在しない。市民の自由は相互依存しているため、あなた自身のプライバシーを放棄することは、実質的にすべての人のプライバシーを放棄することになる。 Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord • Documentation...

lsarelayx

lsarelayx 소개 lsarelayx는 시스템 전체 NTLM 릴레이 도구로, 수신되는 NTLM 기반 인증을 실행 중인 호스트로 릴레이하도록 설계되었습니다. lsarelayx는 SMB를 포함한 모든 수신 인증 요청을 릴레이합니다. lsarelayx는 기존 애플리케이션 인증 흐름에 후킹되므로, 릴레이가 완료된 후에도 원래 인증 요청을 처리하려고 시도합니다. 이렇게 하면 대상 애플리케이션/프로토콜이 오류를 표시하지 않고 lsarelayx 호스트에 대해 인증하는 최종 사용자에게 정상적으로 작동합니다. 기능 SMB,...

Linux Distros Unpatched Vulnerability : CVE-2026-97024

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host syste...

CVE-2026-96281 Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes

On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote ref via the unprivileged system-helper RemoveLocalRef method, causing the anti-downgrade check to fail to find a reference date. A malicious...

CVE-2026-92601: Missing Authorization

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-83342

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...

CVE-2026-83343

CVE-2026-83343 affects Oracle Utilities Network Management System (component: System Wide) in versions 2.5.0.2.0–2.5.0.2.13, 2.6.0.1.0–2.6.0.12B, 2.6.0.2.0–2.6.0.2.10A, and 25.12.0.0.0–25.12.0.0.3 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain un...

CVE-2026-83342

Oracle Utilities Network Management System (component: System Wide ) is affected by an easily exploitable local vulnerability. A low-privileged attacker with logon to the hosting infrastructure can compromise the system, resulting in full takeover with high impact to confidentiality, integrity, a...

EUVD-2026-79695

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and...

PT-2026-92865

Name of the Vulnerable Software and Affected Versions Oracle Utilities Network Management System versions 2.5.0.2.0 through 2.5.0.2.13 Oracle Utilities Network Management System versions 2.6.0.1.0 through 2.6.0.12B Oracle Utilities Network Management System versions 2.6.0.2.0 through 2.6.0.2.10A...

CVE-2026-83343: Missing Authentication for Critical Function

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications component: System Wide. Supported versions that are affected are 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A and 25.12.0.0.0-25.12.0.0.3. Easily exploitable vulnerability...

zen-desktop v0.25.1

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

SUSE CVE-2026-47125

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 1.19.2, the PUT /api/environments/id/templates/variables endpoint, which writes the system-wide .env.global file used for variable substitution in every project's compose file, is missing an admin...

CVE-2026-62427

The Xen hypervisor is vulnerable to a flaw where platform-op locks can be opened to abuse. Specifically, while the control domain or a Xenstore domain uses system-wide locks for operations that may not be executed in parallel, the acquisition method lacks fairness. Furthermore, when XSM/Flask is ...

EUVD-2026-24963

chmod: --preserve-root bypassed by any path that resolves to root e.g. /../...

Malicious code in test-pkg-pnpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5df84cbdf3092d5f7b8f405248144eacdf5119c756c97726974e547810ebec On npm install, the package's postinstall script node demo-clean.js auto-executes two installer-side actions without consent. First, openDemo...

Malicious code in sypoi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22a9450e70ba1095097d2779ad6da01c111c37e940d890fbfc21d1aeb6a0f11 On require, index.js silently bootstraps a full Python runtime on the installer's machine — first via winget install -e --id Python.Python.3.12...

CVE-2026-42490

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...

ALPINE-CVE-2026-42490

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...