EUVD-2026-93180

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another CPU can krefget on nlmsgrequest causing a refcount "addition on 0" bu...

CVE-2026-98252

The Linux kernel contains a refcount bug in the RDMA/core component within the iwpm_get_nlmsg_request() function. The vulnerability is caused by the function initializing the refcount after calling list_add_tail(), which allows another CPU to access the global list and perform a kref_get() on the...

CVE-2026-98252 RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another CPU can krefget on nlmsgrequest causing a refcount "addition on 0" bu...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.12-0.4.hum1 aarch64, x8664 grafana12.4-12.4.12-0.4.hum1.src src...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Shockwave-OSS

BountyTricks 자동화, 원라이너, 유용한 생각을 포함한 버그 바운티 팁과 트릭을 커뮤니티와 공유합니다 목차 💂‍♂️ 기타 정규식 검증기 호모그래프 생성기 Shodan-Scripts HTTP 헤더 MIME 유형 리버스 프록시 라이트업 HTTP 요청 스머글링 GitHub 로컬 정찰 - 사용법: gitsecrets “word” | gf pattern gitsecrets find .git/objects/pack/ -name ".idx"|while read i;do git show-index no WAF...

CVE-2026-43494-PinTheft-PoC

SLEY — PinTheft PoC CVE-2026-43494 개념 증명 — WSL26.6.87.2-microsoft-standard-WSL2에서 ./sley 실행 후 uid=1000raken → uid=0root CVE-2026-43494PinTheft를 위한 단일 파일 개념 증명PoC입니다. RDS zerocopy 참조 카운트 버그 와 iouring 고정 버퍼 를 연쇄적으로 사용하여 SUID-root 바이너리의 페이지 캐시를 덮어쓰는 Linux 커널 로컬 권한 상승입니다. 면책 조항: 이 저장소는 승인된 보안 연구, 교육 ...

jitsploitation

jitsploitation iOS 브라우저 익스플로잇 CVE-2020-9802, 오래된 JIT 버그. 이것은 Project Zero가 원래 문서화한 macOS 및 iOS용 WebKit 엔진의 유명한 JIT 컴파일러 버그에 대한 익스플로잇입니다. 이 버그에 대한 익스플로잇을 브라우저 익스플로잇 학습 연습으로 다시 구현했습니다. 동영상 설명: 클릭 한 번으로 아이폰 해킹하기 크레딧 ProjectZero 블로그 JakeBlair420 구현...

PT-2026-106600

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb carve pskb carve inside header and pskb carve inside nonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the...

Linux Distros Unpatched Vulnerability : CVE-2026-98246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Serialize local codec list cleanup hcidevclosesync clears hdev-localcodecs after releasing hdev-lock. Codec list additions and both traversa...

Linux Distros Unpatched Vulnerability : CVE-2026-98331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via...

CVE-2026-98331: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via ieee80211ifremove, before it unregisters the netdev. However, it's possible...

Linux Distros Unpatched Vulnerability : CVE-2026-98252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another...

Linux Distros Unpatched Vulnerability : CVE-2026-98271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and...

rust-rpm-sequoia security, bug fix, and enhancement update

1.10.2.1-1 - Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784...

PT-2026-106581

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm get nlmsg request iwpm get nlmsg request initializes refcount after list add tail making it accessible to global list where another CPU can kref get on nlmsg request causing a refcount "additio...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.7-0.1.hum1 aarch64, x8664 grafana13.1-13.1.7-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.3-0.1.hum1 aarch64, x8664 grafana13.2-13.2.3-0.1.hum1.src src...

CVE-2020-13942-POC-

CVE-2020-13942 POC + 자동화 스크립트 단계 단계 1 : 즐겨찾는 버그 바운티 프로그램의 모든 대상 서브도메인을 열거합니다. 단계 2 : 이들을 targets.txt 파일에 넣습니다. 단계 3 : 스크립트를 실행합니다. 단계 4 : 취약한 대상을 발견하면, 저를 언급하는 것을 잊지 마세요 :...

pentest-harness

Pentest Harness Heaven for Hackers — プロフェッショナル向けセキュリティテストワークスペース。 認可されたペネトレーションテスト、バグバウンティリサーチ、セキュリティラボ、CTF エンゲージメントのためのオープンソース、ダークファーストの AI エージェントハーネス。プラグインアーキテクチャ上に構築されており、モデルアダプター、ツール、セッション、設定、認証情報といったすべてのレイヤーを設定から差し替え可能です。 あらゆる AI モデル API で動作します。...