CVE-2026-89656

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

CVE-2026-89644

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

EUVD-2026-76569

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-89657 libceph: validate OSD extent maps before cursor advance

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osdclient.c:osdsparseread validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

CVE-2026-89656

CVE-2026-89656 affects the libceph subsystem of the Linux kernel . The vulnerability resides in crush_decode() , which stores CRUSH bucket data by array slot. A malformed CRUSH map can encode a bucket id that does not match its array slot, causing the mapper to alias one bucket into another's wor...

CVE-2026-89656 libceph: reject buckets with mismatched CRUSH ids

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

EUVD-2026-76568

In the Linux kernel, the following vulnerability has been resolved: libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from the decoded bucket id. A malformed map can therefore make one bucket...

CVE-2026-89650 ceph: bound num_export_targets array for mds info v2/v3

In the Linux kernel, the following vulnerability has been resolved: ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads numexporttargets from each per-mds info record and advances the decode cursor by numexporttargets sizeofu32 without first checking...

CVE-2026-89650

CVE-2026-89650 affects the Linux kernel's CephFS client in fs/ceph/mdsmap.c. The function ceph_mdsmap_decode() reads num_export_targets from per-MDS info records and advances the decode cursor by num_export_targets * sizeof(u32) without verifying that enough bytes remain. The upper-bound check is...

EUVD-2026-76562

In the Linux kernel, the following vulnerability has been resolved: ceph: bound numexporttargets array for mds info v2/v3 cephmdsmapdecode in fs/ceph/mdsmap.c reads numexporttargets from each per-mds info record and advances the decode cursor by numexporttargets sizeofu32 without first checking...

EUVD-2026-76556

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

CVE-2026-89644 btrfs: fix extent map leak in NOCOW direct I/O write

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

CVE-2026-89644

CVE-2026-89644 affects the btrfs filesystem in the Linux kernel. The root cause is an extent map reference leak in the NOCOW direct I/O write path: btrfs_get_blocks_direct_write() fails to drop the extent map obtained from btrfs_get_extent() when btrfs_create_dio_extent() returns an error (e.g., ...

call_map

Call Map .. default-role:: code Acerca de Call Map es una herramienta para navegar por grafos de llamadas en Python, con planes de soportar otros lenguajes. A continuación se muestra una captura de pantalla después de ejecutar callmap -m toolz, y luego hacer clic en algunas funciones. .. figure::...

CVE-2026-67211

OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code. Description: The SymSpellModelSerializer.create...

CVE-2026-67211

Apache OpenNLP versions 3.0.0-M4 and 3.0.0-M5 are affected by an Out-of-Memory Denial of Service in the SymSpellModelSerializer.create() method. The method reads two 32-bit count fields (unigramCount, bigramCount) from a binary SymSpell model stream and passes them directly to LinkedHashMap.newLi...

FireShodanMap

FireShodanMap FireShodanMap 是一个实时地图，集成了 Firebase 和 Shodan。通过 Shodan 搜索易受攻击的设备，并将其显示在地图上以供分析。所有在 Firebase 中更新的数据都是实时的。 变更 我们有一个名为 "fireshodan.py" 的文件，负责填充 Firebase 数据库，我们需要修改： root@kitploit: + FILEWITHKEY.json （打开“凭据”标签页，点击创建凭据 。选择 API 密钥选项。创建服务器密钥。它将自动下载为一个 .json 文件） + KEYFIREBASEHERE （打开 Firebas...

metasploitable-pentest-lab

Explotación de vulnerabilidades en Metasploitable Ciclo completo de un ataque real sobre un entorno controlado y aislado: preparación del laboratorio, reconocimiento con nmap, priorización de superficie de ataque, mapeo a CVE, explotación con Metasploit, post-explotación, extracción y cracking de...

CVE-2007-2447_Samba_3.0.25rc3

CVE-2007-2447 'Username' map script' Ejecución de Comandos 3.0.0 - 3.0.25rc3 3.0.20 - 3.0.25rc3 AMRIUNIX...

nginx-map-risk-audit

CVE-2026-42533: Revisión del riesgo de regex en map de NGINX Nota de investigación defensiva sobre CVE-2026-42533, un desbordamiento de búfer en el montón en el procesamiento de solicitudes de NGINX relacionado con directivas map con capturas de regex y ciertos patrones de evaluación de variables...