CESS

CESS — Cryptologically Enchanted Shamir's Secret Is this AI bullshit or slop? A cryptographer or serious implementer reviewing CESS will typically open vectors/ and testdata/ before reading prose. The test suite is the proof of work: it encodes domain knowledge that cannot be substituted with...

cve-2021-44228-waf-tests

WAF 또는 기타 장치를 Log4Shell 공격 문자열 및 다양한 우회 기법에 대해 테스트하는 간단한 bash 스크립트 우회 트릭 출처: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words 실행 방법: ./cve-2021-44228.sh -t -c 또는 기본값인 https://127.0.0.1 및 403을 사용하려면: ./cve-2021-44228.sh 각 테스트 문자열에 대해 이 스크립트는 다음과 같은 다양한 벡터를 사용하여 대상에 요청을 보냅니다: 헤더:...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Отчет об анализе Drupal RCE Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...

Removing the NEEDLE in the Haystack: Backdoor Removal in LLMs Via Weight Orthogonalisation

Backdoor attacks can be implanted in Large Language Models LLMs during training, causing unwanted behaviour when a trigger appears in the input. Existing backdoor defences for LLMs attempt to remove the backdoor but inadvertently shift the model's output distribution to benign prompts, which can...

CVE-2026-18153

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...

CVE-2026-18153 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...

CVE-2026-18153: Use of a Broken or Risky Cryptographic Algorithm

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...

DEBIAN-CVE-2026-90082

In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size managdquerymaxresources sizes gc-nummsixusable from resp.maxmsix and the CPU count, but never from the device MSI-X table. On a 1792 vCPU M-series VM that yields 1793...

CVE-2026-90082 net: mana: Cap MSI-X vectors to the device MSI-X table size

In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size managdquerymaxresources sizes gc-nummsixusable from resp.maxmsix and the CPU count, but never from the device MSI-X table. On a 1792 vCPU M-series VM that yields 1793...

DEBIAN-CVE-2026-90007

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously registered handlers with freeirq when requestirq fails. The rollback loop uses the failing index i for every iteration instead of th...

CVE-2026-90007 scsi: pm8001: Use rollback index when freeing MSI-X vectors

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously registered handlers with freeirq when requestirq fails. The rollback loop uses the failing index i for every iteration instead of th...

CVE-2026-89856 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation ha-msixcount is u16, but ha-maxreqqueues, ha-maxrspqueues and ha-maxqpairs are u8. Deriving the queue count as "ha-maxreqqueues = ha-msixcount - 1" therefore...

CVE-2026-89856

A vulnerability in the Linux kernel qla2xxx SCSI driver arises from a type-width mismatch: ha->msix_count is u16 while derived queue counts (max_req_queues, max_rsp_queues, max_qpairs) are u8 . A device (physical or hot-plugged) advertising 257 MSI-X vectors causes msix_count - 1 to equal 256,...

Linux Distros Unpatched Vulnerability : CVE-2026-90007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: pm8001: Use rollback index when freeing MSI-X vectors pm8001requestmsix unwinds previously registered handlers with freeirq when requestirq fails. The...

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.11 contains a heap buffer overflow issue, caused by the derivecollocatedmotionvectors function in the motion.cc file...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: intelth: A resource leak has been fixed in the error handling path. If an error occurs after calling pciallocirqvectors, pcifreeirqvectors must be called, as already done in the remove function...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed the issue of freeing uninitialized misc IRQ vectors When the VSI setup failed in i40eprobe, as part of the PF switch setup, the driver tried to free misc IRQ vectors in i40eclearinterruptscheme, resulting in a kernel...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: gve: Added NULL pointer checks when freeing irqs. When freeing notification blocks, we index priv-msixvectors. If we fail to allocate priv-msixvectors see abortwithmsixvectors, this could lead to a NULL pointer dereferencing if t...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iavf: Freeing qvectors before queues in iavfdisablevf. The iavffreequeues function clears adapter-numactivequeues, which iavffreeqvectors relies on. Therefore, the order of these two function calls in iavfdisablevf needs to be...

Linux Distros Unpatched Vulnerability : CVE-2026-89577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-io: report non-retryable errors separatedly The error codes BLKSTSNOTSUPP and BLKSTSINVAL should not cause leg failure on dm-raid1. This patch changes the...