EUVD-2026-87068

In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsrdevfinalize can fail after a lower-device RX handler has already been registered slave A is added before the failable slave B and interlink adds. RX handlers run in softirq...

CVE-2026-100071

The Linux kernel contains a vulnerability where the hsr_dev_finalize() function fails to release dynamic nodes learned into the node_db . This occurs because the function can fail after a lower-device RX handler is registered but before completion, allowing frames received during that window to p...

PENeL

PENeL - 組み込み .NET ライブラリを備えた PowerShell PowerShellスクリプトに埋め込んで実行するための .NET DLL ライブラリを準備するプログラム 作成者: Guilherme Bacellar Moralez Th3 0bservator https://twitter.com/th30bservator 免責事項 このコードは研究目的のためにのみ作成・維持されています。悪意のある目的で使用しないでください。 目的 あらゆる .NET DLL ライブラリを準備し、その DLL を埋め込んだ PowerShell...

cont-flood-poc

CVE-2023-45288 の PoC これは、Bartek Nowotarski 氏により発見・文書化された CONTINUATION flood 脆弱性の概念実証コードです。技術的な詳細は、彼のブログ記事 こちら で非常によく説明されています。私は研究者が文書化した Go のバグに焦点を当てましたが、このコードはこの問題に関連する他の CVE のテストにも役立ちます。 このコードは以下のものから着想を得ています： 1. rapid reset 脆弱性の PoC コード（https://github.com/secengjeff/rapidresetclient） 2. Go...

ROOT-APP-GOBINARY-CVE-2026-46600 CVE-2026-46600 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-46600 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42502 CVE-2026-42502 in golang.org/x/net - Patched by Root

Root has patched CVE-2026-42502 in the golang.org/x/net package for Root:Go. Multiple fixed versions available...

CVE-2026-98070

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDSINXMIT in rdstcpresetcallbacks rdstcpresetcallbacks quiesces the transmit path by setting the path state to RDSCONNRESETTING and then waiting for RDSINXMIT to be sampled clear before swapping the underlying...

CVE-2026-98069

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL to be sampled clear, and then runs the transport shutdown and...

CVE-2026-98017

In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation An RTMNEWQDISC request can make clsact bind a populated shared ingress block during -init, publishing an embedded miniQdisc to lockless readers. If the same request has an...

CVE-2026-97940

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6routeiteractive treats a walker in FWSU at the table root as already unlinked. fib6delroute can move a still-linked walker into that same state when the current leaf is the last route at...

StandIn

StandIn StandInは、小さなADポストコンプロマイズツールキットです。StandInは、最近xforceredでリソースベースの制約付き委任を実行するための.NETネイティブソリューションが必要だったことから生まれました。しかし、StandInはすぐに多数の便利機能を含むように拡大しました。 私は、ディレクトリサービスプログラミングについてさらに学び、ADポストエクスプロイテーションツールチェーンに適合するツールを拡張することを願って、StandInの開発を続けたいと考えています。 ロードマップ コントリビューション...

CVE-2026-98131

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmactsoxmit In stmmactsoxmit, if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped before t...

CVE-2026-98105

The Linux kernel contains a vulnerability in the oa_tc6 ethernet driver where oversubscribed traffic causing buffer overflow errors can lead to a kernel assert during skb_put. This occurs because the driver fails to identify a data chunk with the end_valid bit set before exhausting sk buffer spac...

EUVD-2026-86936

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oatc6: Improve the error recovery When oversubscribed traffic causes lot of buffer overflow errors, probably due to loss of data chunks, driver fails to find a data chunk with endvalid bit set, before it runs out o...

CVE-2026-98105

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oatc6: Improve the error recovery When oversubscribed traffic causes lot of buffer overflow errors, probably due to loss of data chunks, driver fails to find a data chunk with endvalid bit set, before it runs out o...

EUVD-2026-86935

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...

CVE-2026-98104

The Linux kernel contains a vulnerability in the net/sched: cls_u32 component where the node ID pool can become exhausted. When the pool is full, gen_new_kid() fails to report an error and instead returns a maximum value, leading u32_change() to insert a duplicate handle into the hash table. Simi...

CVE-2026-98104

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...

SharpGmailC2

SharpGmailC2 私たちの親しみやすいGmailがサーバーとして機能し、インプラントはSMTPを介してデータを外部に流出させ、IMAPプロトコルを介してC2Gmailからコマンドを読み取ります。 免責事項: このプロジェクトは、2022年11月29日以降、Windows Defenderに対して機能しません。このツールは現在、MS Windowsによってvirtool:msil/ "shgmailz." a!mtbとしてシグネチャ登録されています。ただし、近い将来このプロジェクトを、 SharpGmailC2V2 という新しいバージョンにアップグレードする計画があります。 🚫...

EUVD-2026-86929

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb using direct pointer assignments instead of rcuassignpointer: 1. In...