mtk_bp

Outils de firmware BP MediaTek Ce dépôt contient des définitions de formats de fichiers basées sur Kaitai relatives au firmware du modem MediaTek, ainsi que quelques outils en ligne de commande de base pour interagir avec ces types de fichiers. L'IDE Kaitai peut également être utilisé pour explor...

CVE-2023-36874_BOF

CVE-2023-36874 – BOF d'élévation de privilèges locaux Windows Error Reporting Introduction Ceci est une implémentation BOF CobaltStrike mature et opérationnelle de l'exploit d'élévation de privilèges locaux Windows Error Reporting CVE-2023-36874 de Filip Dragovic @filipdragovic. Il a fait le gros...

chronomaly

Chronomaly Chronomaly est une exploitation du noyau pour le noyau Android / Linux utilisant CVE-2025-38352. L'exploit a été écrit spécifiquement pour le noyau Linux v5.10.157, mais devrait fonctionner contre tous les noyaux vulnérables v5.10.x, car il ne nécessite aucun décalage de texte spécifiq...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

Watchguard_WebUI_Unpacker

Dépaqueteur de mise à jour de l'interface Web Watchguard Fireware unpackwatchguard est un outil qui dépaquette ce format de fichier sysa-dl. watchguardsysadl.ksy contient la description Kaitai du format de fichier de mise à jour Web de Watchguard Fireware. Informations Ce format de mise à jour es...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit Ce dépôt contient un exploit pour CVE-2021-3156 ciblant Linux x64. Pour l'analyse complète, veuillez consulter https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Crédit à Braon Samedit de Qualys pour l'avis...

CVE-2019-2215

CVE-2019-2215 Le problème suivant existe dans la branche android-msm-wahoo-4.4-pie de https://android.googlesource.com/kernel/msm et peut-être d'autres : Il y a une use-after-free du membre wait dans la structure binderthread du pilote binder situé dans /drivers/android/binder.c. Comme décrit dan...

FreeBSD : expat2 -- Out-of-bounds Read (11ab3b16-a65d-11f1-a49c-00a0980083d7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 11ab3b16-a65d-11f1-a49c-00a0980083d7 advisory. https://github.com/libexpat/libexpat/pull/1331 reports: Expat through 2.8.3 contains an out-of-bounds...

CVE-2026-77856

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied typed struct field names. resolvetypedstructfield/2 in...

CVE-2026-77856

ash_typescript (Elixir/BEAM library by ash-project) contains a resource-exhaustion flaw in resolve_typed_struct_field/2 within field_selector.ex. When a client-supplied field name on a typed struct field has no match in the reverse map, the code falls back to String.to_atom/1 before any field-exi...

EUVD-2026-68924

Allocation of Resources Without Limits or Throttling vulnerability in ash-project ashtypescript allows an unauthenticated attacker to exhaust the BEAM atom table and abort the node via client-supplied typed struct field names. resolvetypedstructfield/2 in...

pyrmax

pyrmax Décodeur et encodeur pour les trames du protocole de communication Ubiquiti AirMAX, couvrant les séries AC firmware WA et M firmware XW/XM. Décodage des en-têtes externes en clair est piloté par les schémas Kaitai Struct sous ksy/. La charge utile AC sélectionnée selon la version, commutée...

wiremax

wiremax Un dissecteur Wireshark/tshark pour les AirMAX Ubiquiti AC + M et les Information Elements constructeur Mikrotik / RouterBoard associés, écrit en Lua. C'est la contrepartie sur le fil de pyrmax : la logique de décodage reflète ce paquet Python champ pour champ. Le format de paquet AC a ét...

Vikunja has a project duplication bypasses write-permission check on the target parent project

Summary The project-duplication endpoint fails to enforce write access to the target parent project. Any authenticated non-link-share user can duplicate a project they can read into any parent project on the instance, regardless of whether they have write access to that parent — injecting an...

Linux Distros Unpatched Vulnerability : CVE-2026-80722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before...

CVE-2026-80544

A flaw was found in the Linux kernel's s390/zcrypt component. The zcryptmsgtype6sendep11cprb function, responsible for handling EP11 CPRB Coprocessor Request Block domains, uses fragile struct overlays. This approach lacks proper ASN.1 Abstract Syntax Notation One encoding validation and bounds...

EUVD-2026-66459

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

UBUNTU-CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...