cve-2019-12750

Symantec Élévation de privilèges locale - CVE-2019-12750 Basé sur l'excellent article de Kyriakos Economou : https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Seules les versions x64 et les versions plus anciennes de Windows sont...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fixed NULL pointer dereferencing in acpievaddressspacedispatch. A new check was added to cover missed execution paths...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: using arrayindexnospec with indices that come from the guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks helps to mitigate speculative execution side-channels by clamping...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: arm64: Do not call NULL in docompatalignmentfixup. doalignmentt32tohandler only fixes alignment faults for specific instructions; otherwise, it returns NULL e.g., for LDREX. When this occurs, a signal is sent to the caller...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Mitigation is only applied to cBPF programs loaded by unprivileged users. Support for eBPF programs loaded by unprivileged users is typically disabled. This means that only cBPF programs need to be mitigated for BHB...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RISCV: Fixed an oops error caused by the irqsoff latency tracer. The tracehardirqson,off function requires the caller to properly set up the frame pointer. This is because these two functions use the macro ‘CALLERADDR1’ also...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Avoid scheduling in rtasosterm. It is unsafe to use rtasbusydelay to handle a busy status from the IBM,os-term RTAS function in rtasosterm: Kernel Panic – Not Syncing: Attempted to kill init! Exitcode = 0x0000000b...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: secretmem: Disable memfdsecret if arch cannot set the direct map. The memfdsecret syscall returns -ENOSYS if !cansetdirectmap is true. This occurs, for example, in some arm64 configurations, where marking 4k PTEs in the direct ma...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rcv: Prevent NULL pointer dereferencing in machinekexecprepare A NULL pointer dereferencing issue was identified in riscv’s machinekexecprepare. In this function, image-segmenti.buf might be NULL, and it may be copied without...

CVE-2026-43284-Dirty-Frag

CVE-2026-43284 Dirty Frag Exploit pré-compilé pour CVE-2026-43284 Dirty Frag. Code source original de V4bel/dirtyfrag. Compilation make compilation statique glibc make zig-musl-static ZIGTARGET=x8664-linux-musl compilation statique musl Téléchargement Téléchargez les binaires pré-compilés depuis...

apache-struts-cve-2017-9805

Le framework web Apache Struts Le framework web Apache Struts est une solution open source gratuite pour créer des applications web Java. Les applications web se distinguent des sites web conventionnels par le fait qu'elles peuvent générer une réponse dynamique. De nombreux sites web ne diffusent...

Linksys-WRT54GL-Exploitation

De la Soudure au Shell : Exploitation Matérielle Complète du Routeur Linksys WRT54GL CVE-2022-43973 Un parcours de recherche en sécurité embarquée en 10 phases — de la découverte des broches JTAG à l'exécution de code à distance sur un routeur grand public basé sur MIPS. | ---|--- Auteur| Umberto...

zephyr

.. raw:: html Le projet Zephyr est un système d'exploitation temps réel RTOS évolutif prenant en charge plusieurs architectures matérielles, optimisé pour les appareils aux ressources limitées et conçu dans un souci de sécurité. Le système d'exploitation Zephyr est basé sur un noyau à faible...

libunwind_CVE-2015-3239

-- mode: Outline - - هذه هي الإصدارة 1.0 من مكتبة unwind. تدعم هذه المكتبة عدة مجموعات من المعماريات/أنظمة التشغيل: Linux/x86-64: تعمل بشكل جيد. Linux/x86: تعمل بشكل جيد. Linux/ARM: تعمل بشكل جيد. Linux/IA-64: تم اختبارها ودعمها بالكامل. Linux/PARISC: تعمل بشكل جيد، لكن مكتبة C تفتقر إلى...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 Copy Fail Exploit pré-compilé pour CVE-2026-31431 Copy Fail. Code source original de tgies/copy-fail-c, avec ajout de la cible de compilation i386 x8632. Découverte de la vulnérabilité et PoC original par theori-io/copy-fail-CVE-2026-31431. Analyse canonique : copy.fail. Build make...

Agentic-ZTA: A Multi-Agent Architecture for Autonomous Zero Trust Enforcement

Agentic AI is emerging as a promising paradigm for automating complex cybersecurity decisions, yet its use in enforcing zero trust introduces significant challenges in safety, reliability, and policy compliance. This paper presents Agentic AI based zero trust architecture Agentic-ZTA that...

CVE-2019-0887

CVE-2019-0887 Compilez le CVE-2019-0887, renommez-le en winhlp.dll Compilez InstallHook, renommez-le en hook.exe attention, ils doivent être compilés en x64 Placez-les dans le système malveillant comme ceci c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil si...

KernelPatch

KernelPatch Patcher et hooker le noyau Linux avec seulement une image de noyau Linux strippée. | |/ / | | \ | | | | | ' // \ '| ' \ / \ | | / | / | ' \ | . \ / | | | | | / | / | | || | | | | ||\|| || ||||| ,|\|| || Obtenir toutes les informations de symboles sans code source ni informations de...

[SECURITY] Fedora 45 Update: xmms2-0.9.7-9.fc45

XMMS2 is an audio framework, but it is not a general multimedia player - it will not play videos. It has a modular framework and plugin architecture for audio processing, visualisation and output, but this framework has not been designed to support video. Also the client-server design of XMMS2 an...