home.social

Search

8 results for “secdb”

  1. ZEN SecDB @secdb

    🚨 PwnEscape (CVE-2026-99999) has been identified as a notable vulnerability.

    In the Linux kernel, the following vulnerability has been resolved:

    ipv4: validate checksum_start before completing checksum

    If a packet with bad checksum metadata gets into the ipv4 stack,
    skb_checksum_help can corrupt the network header and cause a bunch of
    mischief.

    This was discovered and reported by Paulos, and has been reporoduced
    by others independently since.

    We really shouldn't allow such packets in, but as a defence
    in depth measure, let's also check before we complete the checksum.

    A more complete validation at input is forthcoming, but needs more work.

    ℹ️ Additional details, advisories and sightings on ZEN SecDB 👉 secdb.nttzen.cloud/cve/detail/


    #infosec #pwnescape #linux #kernel #cve202699999 #nttdata
  2. ZEN SecDB @[email protected]

    🛡️ secdb-cli 0.7.0 is out.

    It's the open source command-line client for ZEN SecDB: CVE lookup, SSVC, and auditing of packages, SBOMs, dependency manifests, Linux hosts and Docker images.

    What's new:

    - secdb search: full-text search across CVEs, CWEs, security advisories, NASL plugins and ExploitDB entries. Filter by record type and by date, combine terms with OR, exclude them, search exact phrases. CVEs in the CISA KEV catalog are marked, and every result links to its record.

    - --jq: filter the JSON output of any command with a jq expression, without installing jq. Handy in CI images and on Windows.

    - Safer terminal output: control characters coming from third-party feed data are stripped before they reach your terminal.

    Examples:
    secdb search fortinet kev:true --since 30d
    secdb search '"remote code execution"' --type cve
    secdb audit sbom --file bom.json --fail-on high --jq '.[].advisories[].id'

    💾 Binaries for Linux, macOS and Windows:
    github.com/giterlizzi/secdb-cl

    #InfoSec #VulnerabilityManagement #OpenSource #Golang #CVE #NTTDATA #ZENSecDB

    #infosec #vulnerabilitymanagement #opensource #golang #cve #nttdata
  3. ZEN SecDB @secdb

    🚨 [CISA-2026:1015] CISA Adds One Known Exploited Vulnerability to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-21589 (secdb.nttzen.cloud/cve/detail/)
    - Name: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Atlassian
    - Product: Multiple Products
    - Notes: confluence.atlassian.com/secur ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    #zen #secdb #infosec #cve #cisa_kev #cisa_20261015
  4. ZEN SecDB @[email protected]

    🚨 [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (secdb.nttzen.cloud/security-ad)

    CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise.

    ⚠️ CVE-2026-0322 (secdb.nttzen.cloud/cve/detail/)
    - Name: Palo Alto Networks PAN-OS Code Injection Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Palo Alto Networks
    - Product: PAN-OS
    - Notes: security.paloaltonetworks.com/ ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-105133 (secdb.nttzen.cloud/cve/detail/)
    - Name: Ahsay AhsayCBS Improper Authentication Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Ahsay
    - Product: AhsayCBS
    - Notes: ahsay.com/en/company/announcem ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-105134 (secdb.nttzen.cloud/cve/detail/)
    - Name: Ahsay AhsayCBS Command Injection Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Ahsay
    - Product: AhsayCBS
    - Notes: ahsay.com/en/company/announcem ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    ⚠️ CVE-2026-76519 (secdb.nttzen.cloud/cve/detail/)
    - Name: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
    - Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
    - Known To Be Used in Ransomware Campaigns? Unknown
    - Vendor: Cisco
    - Product: Secure Email Gateway
    - Notes: sec.cloudapps.cisco.com/securi ; ; BOD 26-04: cisa.gov/news-events/directive ; Forensics Triage Requirements: cisa.gov/news-events/directive ; nvd.nist.gov/vuln/detail/CVE-2

    #ZEN #SecDB #InfoSec #CVE #CISA_KEV #cisa_20261014 #cisa20261014 #cve_2026_0322 #cve_2026_105133 #cve_2026_105134 #cve_2026_76519 #cve20260322 #cve2026105133 #cve2026105134 #cve202676519

    #zen #secdb #infosec #cve #cisa_kev #cisa_20261014
  5. SecBurg @secburg

    Wazuh (open-source XDR & SIEM) in v4.14.9 released

    secburg.com/posts/wazuh-4149-r

    #wazuh #siem #xdr #infosec #opensource
  6. SecBurg @secburg

    Opengrep (open-source Semgrep alternative) in v1.31.0 released

    secburg.com/posts/opengrep-v13

    #opengrep #sast #infosec #appsec #opensource
  7. SecBurg @secburg

    curl v8.23.0 released, fixes 24 vulnerabilities, drops SMB-support

    secburg.com/posts/curl-v8230-r

    #curl #infosec #opensource #cybersecurity #libcurl
  8. NBA News @[email protected]

    Auburn, Alabama basketball teams talk new season, expectations at 2027 SEC Tipoff rawchili.com/nba/858473/ #2027SecTipoff #Alabama #AlabamaCrimsonTide #Auburn #AuburnTigers #Basketball #CollegeBasketball #CollegeSports #KristyCurry #LarryVickers #MountainBrook #myfoxal #NateOats #News #PaulinLove #sec #SECBasketball #StevenPearl #tuscaloosa #wbrc

    #2027sectipoff #alabama #alabamacrimsontide #auburn #auburntigers #basketball
Share on Mastodon

Enter the server where you have an account.