gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

CVE-2018-1000199

CVE-2018-1000199 The Linux ptrace code virtualizes access to the debug registers, and the virtualization code has incorrect error handling. This means that if you write an illegal value to, say, DR0, the internal state of the kernel's breakpoint tracking can become corrupt despite the fact that t...

Platbox

Platbox UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW t...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...

LoongBleed

LoongBleed 中文 LoongBleed is a hardware vulnerability, conceptually similar to ZenBleed CVE-2023-20593 — affecting Loongson LA464/LA664 processors that implement both LSX 128-bit SIMD and LASX 256-bit SIMD. On LoongArch, the LSX $vr registers 128-bit alias the lower half of the LASX $xr registers...

CVE-2026-98948

A flaw was found in the Linux kernel's Mellanox Spectrum switch mlxsw driver. This flaw allows a local privileged user to cause a Denial of Service DoS by creating network flow classification templates that match port ranges. Because the driver fails to release port range registers allocated duri...

CVE-2026-117606

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-117606 NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

EUVD-2026-111541

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-117606

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-117606 NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares usedby with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-117606

Versions of NexoPOS up to and including 6.3.0 are vulnerable to a missing authorization flaw in the CashRegistersService . The system fails to verify if the used_by field matches the current user, allowing authenticated cashiers with the nexopos.use.registers permission to manipulate other cashie...

PT-2026-127730

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares used by with the user. Attackers holding the default nexopos.use.registers permission can submit...

CVE-2026-99022

In the Linux kernel, the following vulnerability has been resolved: regulator: ltc3676: don't read the write-only HRST and CLIRQ registers HRST 0x1e and CLIRQ 0x1f are write-only command strobes. Writing HRST triggers a hard reset of the chip and writing CLIRQ clears the interrupt; reading them...

CVE-2026-79608

A flaw was found in Xen. Due to an inverted conditional check in the handling of processor configuration registers, the software mitigation for the Zenbleed hardware vulnerability is not applied when required. A malicious guest user can exploit this lack of protection to access sensitive data...

CLSA-2023-1686651204 kernel: Fix of 28 CVEs

cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - vt: drop old FONT ioctls CVE-2021-33656 - fbmem: Check virtual screen sizes in fbsetvar CVE-2021-33655 - fbcon: Prevent that...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from the use of st-lock serialization transactions in the access path to AXI ADC registers. However, the detection function does not initialize this mutual exclusion lock before registering it with the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Added SRCU protection for reading PDPTRs in getsregs2. Added read-side protection when reading PDPTR registers in getsregs2. Reading PDPTRs may trigger access to guest memory: kvmpdptrread - svmcachereg - loadpdptrs ...