@adhisimon@mastodon.kodesumber.com
·
May 06, 2026
Adhidarma Hadiwinoto 
@adhisimon@mastodon.kodesumber.com
Tukang gali terowongan virtual yang sok tau IT, networking, dan programming. Terobsesi sistem #distributed, #host2host, #decentralized. Bermimpi konten Internet kembali #federated. Tunnel digger who acting knows everything about IT, networking, and programing. Obsessed with distributed, host2host, and decentralized. Dreaming of internet content come-back to federated mode. I also available on #deltachat. #Coffee lover. Addicted to #wordle n #hardle #jakarta #indonesia #fedora
mastodon.kodesumber.com
Yang masih pakai #httpd nya #apache silahkan dicek, kena impact-nya gak
Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE https://thehackernews.com/2026/05/critical-apache-http2-flaw-cve-2026.html
#cve #infosec
0
1
1
@adhisimon@mastodon.kodesumber.com
·
May 05, 2026
Adhidarma Hadiwinoto
@adhisimon@mastodon.kodesumber.com
Tukang gali terowongan virtual yang sok tau IT, networking, dan programming. Terobsesi sistem #distributed, #host2host, #decentralized. Bermimpi konten Internet kembali #federated. Tunnel digger who acting knows everything about IT, networking, and programing. Obsessed with distributed, host2host, and decentralized. Dreaming of internet content come-back to federated mode. I also available on #deltachat. #Coffee lover. Addicted to #wordle n #hardle #jakarta #indonesia #fedora
mastodon.kodesumber.com
RE: https://mastodon.kodesumber.com/@redis_release_watcher/116522696579501450
Yang punya redis, ada security patch buat CVE-2026-25243 dan CVE-2026-23479.
#redis #cve #infosec
0
0
0
@sekurakbot@mastodon.com.pl
·
May 05, 2026
sekurak News
@sekurakbot@mastodon.com.pl
Bot publikujący najnowsze wiadomości sekurak.pl 
https://sekurak.pl Account by @kkrenski
mastodon.com.pl
Poważna podatność w platformie Ollama prowadzi do wycieku pamięci. A wszystko przez odpowiednio spreparowany plik GGUF (CVE-2026-5757)
Badacz bezpieczeństwa Jeremy Brown, znany z odkrywania luk (memory corruption) w ogólnodostępnych narzędziach, po raz kolejny udowodnił, że innowacyjne metody oraz nieszablonowe działania pozwalają wychwycić błędy, które przez lata pozostawały niewidoczne. Korzystając ze wsparcia sztucznej inteligencji udało mu się wykryć poważną podatność w silniku Ollama, skutkującą możliwym wyciekiem danych z...
#WBiegu #Ai #Cve #Gguf #Ollama #Oob
https://sekurak.pl/powazna-podatnosc-w-platformie-ollama-prowadzi-do-wycieku-pamieci-a-wszystko-przez-odpowiednio-spreparowany-plik-gguf-cve-2026-5757/
2
0
1
@Larvitz@burningboard.net
·
May 01, 2026
Larvitz 
@Larvitz@burningboard.net
IT Consultant from Germany, Linux enthusiast, BSD fanboy and firmly convinced that Ancient Domains of Mystery is the greatest video game of all time (and always will be). You'll find me here talking about Open Source, self-hosting, advanced networking (proud operator of AS201379), smart home shenanigans, and anything you can torment with a terminal. Cat pictures also welcome. Left, antifascist, vegan. The trifecta your uncle warned you about.
burningboard.net
Fresh gist: mitigating CVE-2026-31431 ("Copy Fail") on RHEL 8/9/10 with a tiny Ansible playbook.
It blacklists algif_aead via a kernel boot arg (initcall_blacklist=algif_aead_init), reboots only when needed, and asserts the mitigation actually stuck after reboot. Idempotent & safe to re-run.
https://codeberg.org/Larvitz/gists/src/branch/main/2026/20260501-CVE-2026-31431_RHEL_Mitigation.md
#Ansible #RHEL #Linux #InfoSec #SysAdmin #DevOps #CVE #CVE_2026_31431 #copyfail
27
2
22
I don't know what you spent your day doing, but I personally copy failed all day.
https://discourse.ifin.network/t/copy-fail-732-bytes-to-root-on-every-major-linux-distributions/342/27
#cve #linux
1
0
0
@veronica@mastodon.online
·
Apr 30, 2026
Veronica Olsen
@veronica@mastodon.online
System Architect ★ Software Developer ★ High Energy Physics PhD at Uni Oslo & CERN ★ Linux ★ Python ★ Open Source ★ Unicode Unicorn ★ ISO 8601 Enthusiast ★ Consumer of Sci-Fi ★ Hobby Writer ★ Born at 336 ppm CO₂ ★ She/They Open Source: https://novelwriter.io & https://fosstodon.org/@novelwriter Banner image from Wallpaper Access.
mastodon.online
50
6
63
@tankgrrl@hachyderm.io
·
Apr 30, 2026
💀 𝓕airchild 💀
@tankgrrl@hachyderm.io
Maggie McFee - they/she - Toots en English & Francais - Maker, artist, GenX, actual cyborg, neo-luddite - Ivy League HPC days, bush league mad science nights & weekends - Cambridge (MA) & bunch of other places. Future grumpy old lady in Rouen or Orléans - Fabricante, artiste, Gen X, cyborg réelle, néo-luddite. - HPC dans l'Ivy League le jour, science folle de ligue mineure, les soirs et les week-ends - Cambridge (MA) et un tas d'autres endroits. Future vieille dame grincheuse à Rouen ou Orléans
hachyderm.io
No warranty implied, use at your own risk. But this short C program can check if your Linux machine is still vulnerable to Copy Fail (there's also this page with python code from our friends in Estonia https://docs.hpc.ut.ee/public/cve-2026-31431/ )
Output includes "ARE available" or "NOT available"
Again: compile and run at your own risk. Don't just trust me blindly. Read the code. #CopyFail #CVE-2026-31431
==============
#include
#include
#include
#include
#include
#include
int main(void) {
int sock;
struct sockaddr_alg sa;
// Prepare sockaddr_alg for AEAD/GCM
memset(&sa, 0, sizeof(sa));
sa.salg_family = AF_ALG;
strcpy((char *)sa.salg_type, "aead");
strcpy((char *)sa.salg_name, "gcm(aes)");
// Try to create AF_ALG socket
sock = socket(AF_ALG, SOCK_SEQPACKET, 0);
if (sock == -1) {
perror("socket(AF_ALG, aead)");
printf("algif_aead functions are NOT available (AF_ALG socket creation failed).\n");
return 1;
}
// Try to bind to AEAD/GCM
if (bind(sock, (struct sockaddr *)&sa, sizeof(sa)) == -1) {
perror("bind(AF_ALG, aead, gcm(aes))");
printf("algif_aead functions are NOT available (bind failed).\n");
close(sock);
return 1;
}
printf("algif_aead functions ARE available (AF_ALG AEAD bind succeeded).\n");
close(sock);
return 0;
}
3
3
0
ché, cómo están haciendo con esto: https://copy.fail/#copy-fail cve-2026-31431 #ciberseguridad #CVE #linux
0
0
0
@fooflington@infosec.exchange
·
Apr 30, 2026
Matthew Slowe
@fooflington@infosec.exchange
𝚆𝚊𝚔𝚎𝚄𝚙: 𝚕𝚍𝚛 𝚛𝟶, 𝟶𝚡𝚌𝟶𝚏𝚏𝚎𝚎; 𝚋𝚕 𝚍𝚛𝚒𝚗𝚔; 𝚖𝚘𝚟 𝚙𝚌,𝚕𝚛; /* 𝚅𝚒𝚎𝚠𝚜 𝚊𝚛𝚎 𝚖𝚒𝚗𝚎 𝚗𝚘𝚝 𝚖𝚢 𝚎𝚖𝚙𝚕𝚘𝚢𝚎𝚛'𝚜. */ Working in IT to help HE & FE (and other public sector) organisations work better together. Somewhere in the vicinity of the far South East of #England and occasionally in the farther reaches of #Scotland #photography #kent #highlands #linux #federation #eduroam #shibboleth #saml #itsecurity #highereducation #academia And it pains me to need to say that I do not consent to any third-party Mastodon or other fediverse instance's Terms of Service, as I am not a user of their service. All posts are my own, and permission to propagate them is always revocable.
infosec.exchange
https://copy.fail/
Local Privilege Escalation in every Linux kernel since 2017
Hopefully no one is sitting on a low-privilege RCE...
#linux #security #rce #lpe #cve #CVE202631431
4
2
7
The CVE program averted a funding emergency, but the crises of the last few years—like the NVD stopping work in 2024 and the 2025 funding scare—have eroded trust in the existing system.
The biggest takeaway from the chaos? Everyone should have a plan B.
Read Josh Bressers deep dive into the current state of vulnerability identifiers, the loss of trust, and what to expect next. https://anchore.com/blog/cve-is-saved-but-theres-work-to-do/
#Cybersecurity #VulnerabilityManagement #CVE #NVD
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
@sekurakbot@mastodon.com.pl
·
Feb 16, 2026
sekurak News
@sekurakbot@mastodon.com.pl
Bot publikujący najnowsze wiadomości sekurak.pl https://sekurak.pl Account by @kkrenski
mastodon.com.pl
Jak wtyczka do backupów w WordPress pozwalała na zdalne wykonanie kodu – CVE-2026-1357
Backupy są ważne i każdy kto choć raz padł ofiarą ataku lub spotkał się z awarią środowiska produkcyjnego wie o czym jest mowa. Do wykonywania kopii zapasowych istnieje szereg rozwiązań, zarówno darmowych jak i komercyjnych. Coraz częściej można się również spotkać ze specjalistycznymi narzędziami, jakim jest np. popularny plugin WPvivid...
#WBiegu #Backup #Bugbounty #Cve #Rce #Traversal #Wordpress
https://sekurak.pl/jak-wtyczka-do-backupow-w-wordpress-pozwalala-na-zdalne-wykonanie-kodu-cve-2026-1357/
1
0
1
📺 https://peer.adalta.social/w/szNwziYVqZLTBwCgA6NWWf 🔗 🇩🇪🇺🇸🇫🇷
Une faille d’injection de code dans le système d’aide menace la stabilité des postes de travail critiques.
0
0
0
📺 https://peer.adalta.social/w/mE7ZhqmZWLS2X9HU5NGNPL 🔗 🇩🇪🇺🇸🇫🇷
A high-severity code injection flaw in KeePass’s help system, while not actively exploited, presents a tangible risk of application crashes and workflow disruption through crafted HTML content.
0
0
0
📺 https://peer.adalta.social/w/wXivcJdGsJsNDv46vvaEjc 🔗 🇩🇪🇺🇸🇫🇷
Eine Code-Injection-Schwachstelle im Hilfesystem der Passwort-Manager-Software kann zu Anwendungsabstürzen führen, stellt jedoch ein moderates Risiko dar.
0
0
0
📺 https://peer.adalta.social/w/ha7u8osqJ9djsMHeNLvuaH 🔗 🇩🇪🇺🇸🇫🇷
Une faille de dépassement de tampon accessible à distance compromet l’intégrité des réseaux, avec un exploit public disponible.
0
0
0