redxor

C2 de malware Linux 'RedXOR': un ejemplo de detección Este paquete sirve como demostración de cómo se puede usar Zeek para detectar la puerta trasera de Linux "redXOR" mediante métodos basados en estado. Referencias: Blog de Corelight...

Orbit

ＯＲＢＩＴ Blockchain Transactions Investigation Tool 3.2-blue.svg" Introduction Orbit is designed to explore network of a blockchain wallet by recursively crawling through transaction history. The data is rendered as a graph to reveal major sources, sinks and suspicious connections. Note: Orbit only...

CVE-2026-106371

An incorrect authorization flaw was found in the Transactions Platform component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=553326010 https://code.google.com/p/chromium/issues/detail?id=106371...

CVE-2026-106371

Incorrect authorization in Transactions Platform in Google Chrome on o...

Linux Distros Unpatched Vulnerability : CVE-2026-106371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information...

CVE-2026-106371

Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93636

Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106371

Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106371

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization flaw within the Transactions Platform . A remote attacker could exploit this by hosting a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, ...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2026-107043

Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

In the Transactions Platform of Google Chrome, prior to version 152.0.7977.65, incorrect UI representation allowed a remote attacker to potentially spoof UI elements through a crafted HTML page using social engineering techniques. Chromium security severity: Low...

CVE-2026-104431

Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach...

CVE-2026-104435

Zebra zebrad 4.4.0 and zebra-script 6.0.0 are vulnerable to a consensus rule enforcement failure. The software fails to correctly apply the ZIP-244 consensus rule , specifically by accepting V5 transparent inputs signed with SIGHASH_SINGLE that do not have a corresponding output. This flaw allows...

CVE-2026-104431

Versions of Zebra prior to 6.0.0 are vulnerable to a denial of service (DoS) condition. The root cause is a vulnerability where unauthenticated peers can stall Tokio workers by submitting mempool transactions that require expensive synchronous script verification . Specifically, attackers can tra...

CVE-2026-104431 Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach...

CVE-2026-104431 Zebra before 6.0.0 Denial of Service via Synchronous Script FFI Verification

Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach...

EUVD-2026-91442

Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchronous script verification. Attackers can send non-standard high-sigop P2SH transactions that reach...

CVE-2026-104423 Zebra before 6.2.1 Denial of Service via Uncapped V6 Shielded Proof Verification

Zebra zebrad before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactions with invalid Halo2 proofs. Attackers can flood the shared unprioritized Halo2 verification queue with zero-fee...

PT-2026-104240

Zebra zebrad 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the sending peer recorded as their source. A remote inbound peer can push many unique transactions to occupy a disproportiona...