67994 matches found
Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8727-1)
"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8727-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through th...
Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8728-1)
"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8728-1 advisory. It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memo...
MACHINE-BASIC-PENTESTING-1
Penetration Testing Assessment Report: Basic Pentesting 1 !R...
UBUNTU-CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
UBUNTU-CVE-2026-19931
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...
UBUNTU-CVE-2026-80255
A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...
UBUNTU-CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
UBUNTU-CVE-2026-82209
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
UBUNTU-CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
UBUNTU-CVE-2026-80229
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
CVE-2021-3156
CVE-2021-3156 PoC de shell root para CVE-2021-3156 sin fuerza bruta Con fines educativos, etc. Probado en Ubuntu 20.04 contra sudo 1.8.31 Todo el crédito de la investigación: Qualys Research Team Consulta los detalles en su blog. Puedes comprobar si tu versión de sudo es vulnerable con: $ sudoedi...
UBUNTU-CVE-2026-31911
libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...
ROOT-OS-UBUNTU-2404-CVE-2020-14356 CVE-2020-14356 in linux - Patched by Root
Root has patched CVE-2020-14356 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2024-57875 CVE-2024-57875 in linux - Patched by Root
Root has patched CVE-2024-57875 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38190 CVE-2025-38190 in linux - Patched by Root
Root has patched CVE-2025-38190 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2017-13693 CVE-2017-13693 in linux - Patched by Root
Root has patched CVE-2017-13693 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-71300 CVE-2025-71300 in linux - Patched by Root
Root has patched CVE-2025-71300 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37915 CVE-2025-37915 in linux - Patched by Root
Root has patched CVE-2025-37915 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...