Critical: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

AlmaLinux 10 : cjose (ALSA-2026:80605)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:80605 advisory. cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 Tenable has extracted the preceding description block...

ROS-20261012-73-0211

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-110663

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.0 Description The freerdp-shadow-cli shadow server fails to perform a range check on the frame id within a client's Frame Acknowledge PDU. This allows the in-flight frame count in the shadow encoder inflight fram...

ROS-20261012-73-0140

The vulnerability of the fnnlosfaddcallback function in the net/netfilter/nfnetlinkosf.c module of the netfilter kernel of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261012-73-0123

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0038

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0014

The vulnerability of the tipcskfilterconnect function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system is related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a servi...

ROS-20261012-73-0084

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0078

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ALSA-2026:80605 Critical: cjose security update

CJose is C library implementing the Javascript Object Signing and Encryption JOSE. Security Fixes: cjose: OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption CVE-2026-53939 For more details about the security issues, including the impact, a CVSS score,...

CVE-2026-109246: Integer Underflow (Wrap or Wraparound)

FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadowencoderinflightframes can underflow. An authenticated client can acknowled...

rosenbridge

project:rosenbridge : puertas traseras de hardware en CPUs x86 github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax Resumen project:rosenbridge revela una puerta trasera de hardware en algunos procesadores x86 de escritorio, portátiles y embebidos. La puerta trasera permite que el código...

0days-in-the-wild

0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...

netsniff-ng

netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you will, \ ^, ,^ / the Swiss army knife for network |'O\ /O'| . -- packets. ' ' /...

ctftool

CTFTOOL ¿Solo quieres probar el exploit SYSTEM? Haz clic aquí. Una herramienta interactiva de exploración de CTF Esto es ctftool, una herramienta interactiva de línea de comandos para experimentar con CTF, un protocolo poco conocido utilizado en Windows para implementar servicios de texto. Esto...

rpcfirewall

Necesito Más Información Consulte nuestra publicación del blog sobre RPC Firewall o nuestra charla de BlackHat para comprender mejor RPC, los ataques RPC y la solución: RPC Firewall. Únase a nuestro espacio de trabajo de la comunidad Slack de |Zero| Labs para cualquier pregunta, problema o...

flipperzero-firmware

Flipper Zero Firmware Sito ufficiale di Flipper Zero - Un modo semplice per spiegare ai tuoi amici cosa può fare Flipper Zero. Aggiornamento del firmware di Flipper Zero - Miglioramenti per il tuo delfino: ultime versioni del firmware, strumenti di aggiornamento per PC e dispositivi mobili...

hardcodes

hardcodes extrae cadenas del código fuente hardcodes es una utilidad para buscar cadenas escritas directamente hardcoded por desarrolladores en los programas. Utiliza un tokenizador modular que puede manejar comentarios, cualquier cantidad de barras invertidas y casi cualquier sintaxis que se le...

attack-surface-framework

Attack Surface Framework Resumen ASF tiene como objetivo proteger a las organizaciones actuando como un vigía de la superficie de ataque. Proporcionando un "Objeto" que puede ser: un Dominio, dirección IP o CIDR Interno o Externo, ASF descubrirá activos/subdominios, enumerará sus puertos y...