CVE-2026-93241

A flaw was found in the Linux kernel. When the out-of-memory OOM killer terminates a multi-threaded process and asynchronous memory cleanup cannot complete, exiting threads continue to invoke memory reclamation and serialize behind an internal lock. A local user can exploit this vulnerability by...

ThreatExchange

Projects in this Repository This repository originally started as code to support Meta's ThreatExchange API, but over time has grown to include a number of projects to support signal exchange and content moderation in general. Below are a list of sub-projects. PDQ Image Hashing and Similarity...

CVE-2026-93240

A flaw was found in the Linux kernel's memory control group memcg subsystem. A local user with permissions to configure memory limits can cause a Denial of Service DoS by triggering memory reclamation under legacy memory soft limits. When the kernel's background memory reclamation process manages...

vuln-bank

Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...

CVE-2026-93234

A flaw was found in the Linux kernel's Generic USB Display GUD driver. When reading television mode names from an attached device, the driver does not verify that the returned data contains a terminating null byte within its fixed-size buffer. A local attacker could attach a crafted device to cau...

CVE-2026-93232

A flaw was found in the Linux kernel's HugeTLB huge page memory management subsystem. During system startup, an uninitialized memory dereference occurs when HugeTLB Vmemmap Optimization HVO is enabled on a kernel compiled with virtual memory debugging options. A local user able to configure or...

CVE-2026-93229

A flaw was found in the Linux kernel's Network File System daemon nfsd. A local user can cause a Denial of Service DoS or observe inconsistent kernel data on systems with weakly-ordered processor architectures. This issue occurs due to a missing read memory barrier in the Remote Procedure Call RP...

CVE-2026-93227

A flaw was found in the Linux kernel. This vulnerability allows a local user with control over boot parameters, or systems with specific memory alignments, to cause a Denial of Service DoS through a kernel panic. During early system boot with deferred memory initialization enabled, improper...

CVE-2026-93230

A flaw was found in the Linux kernel. This issue may allow a local user to cause a Denial of Service DoS due to an improper initialization sequence in the HugeTLB Huge Translation Lookaside Buffer memory subsystem. During system startup, gigantic huge page memory structures can be inspected befor...

CVE-2026-93226

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition occurs when reading route exception lists without proper synchronization against concurrent route updates. A local user can trigger this flaw by querying network routing tables during simultaneous route updates,...

CVE-2026-93217

A flaw was found in the Linux kernel's memory management subsystem. A race condition can occur when an HMM-based Graphics Processing Unit GPU driver interacts with madviseMADVCOLD or MADVPAGEOUT operations. This can lead to a kernel panic, effectively causing a Denial of Service DoS on the affect...

CVE-2026-93216

A flaw was found in the Linux kernel. A Time-of-check to time-of-use TOCTOU vulnerability exists in the printpageownermemcg function, where page-memcgdata is read multiple times without proper locking. If a memory page is concurrently freed and reallocated between these reads, it can trigger...

CVE-2026-93213

A flaw was found in the Linux kernel. An out-of-bounds read vulnerability exists in the ofaliasscan function's stem parser. This issue occurs because the parser checks for a digit before verifying if it's within the valid memory bounds, potentially allowing it to read one byte before the intended...

gitea-stargazers-hidden

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · gitea-stargazers-hidden gitea-stargazers-hidden Gitea 1.27.3 - Gitea Limited and private users are supposed to vanish from anonymous viewers. GetInfo already 404s them. Follower lists already apply...

CVE-2026-93212

A flaw was found in the Linux kernel NFS daemon nfsd. During network teardown, the nfsdserv pointer is prematurely cleared while the file cache cleanup process is still active. This can lead to a null pointer dereference in the nfsdfilenetdispose function. Exploiting this vulnerability could caus...

Koh

Koh Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, s...

CVE-2026-93210

A flaw was found in the Linux kernel's Server Message Block SMB client Distributed File System DFS cache. This vulnerability occurs due to improper handling of invalid target hints, specifically when a null pointer is dereferenced within the dfscachenorequpdatetgthint function. An attacker could...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

CVE-2026-93208

A flaw was found in the Linux kernel's memory management system. A race condition can occur when the kernel attempts to free memory caches while a CPU is being taken offline. This can lead to memory not being properly released, causing resource exhaustion or memory leaks. A local user could...

evilarc

evilarc Purpose evilarc lets you create a zip file that contains files with directory traversal characters in their embedded path. Most commercial zip program winzip, etc will prevent extraction of zip files whose embedded files contain paths with directory traversal characters. However, many...