#zensecdb — Public Fediverse posts

🚨 PwnEscape (CVE-2026-99999) has been identified as a notable vulnerability.

In the Linux kernel, the following vulnerability has been resolved:

ipv4: validate checksum_start before completing checksum

If a packet with bad checksum metadata gets into the ipv4 stack,
skb_checksum_help can corrupt the network header and cause a bunch of
mischief.

This was discovered and reported by Paulos, and has been reporoduced
by others independently since.

We really shouldn't allow such packets in, but as a defence
in depth measure, let's also check before we complete the checksum.

A more complete validation at input is forthcoming, but needs more work.

ℹ️ Additional details, advisories and sightings on ZEN SecDB 👉 https://secdb.nttzen.cloud/cve/detail/CVE-2026-99999

#InfoSec #PwnEscape #Linux #Kernel #CVE202699999
#NTTDATA #ZENSecDB

🛡️ secdb-cli 0.7.0 is out.

It's the open source command-line client for ZEN SecDB: CVE lookup, SSVC, and auditing of packages, SBOMs, dependency manifests, Linux hosts and Docker images.

What's new:

- secdb search: full-text search across CVEs, CWEs, security advisories, NASL plugins and ExploitDB entries. Filter by record type and by date, combine terms with OR, exclude them, search exact phrases. CVEs in the CISA KEV catalog are marked, and every result links to its record.

- --jq: filter the JSON output of any command with a jq expression, without installing jq. Handy in CI images and on Windows.

- Safer terminal output: control characters coming from third-party feed data are stripped before they reach your terminal.

Examples:
secdb search fortinet kev:true --since 30d
secdb search '"remote code execution"' --type cve
secdb audit sbom --file bom.json --fail-on high --jq '.[].advisories[].id'

💾 Binaries for Linux, macOS and Windows:
https://github.com/giterlizzi/secdb-cli/releases/tag/v0.7.0

#InfoSec #VulnerabilityManagement #OpenSource #Golang #CVE #NTTDATA #ZENSecDB