1041234 matches found
CVE-2026-98787
The Linux kernel contains a vulnerability in the bpf subsystem due to missing migration protection in __rhtab_map_lookup_and_delete_batch() . The function calls bpf_mem_cache_free_rcu() , which utilizes this_cpu_ptr() ; however, unlike other callers of rhtab_delete_elem() , it only uses rcu_read_...
EUVD-2026-103872
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in rhtabmaplookupanddeletebatch bpfmemcachefreercu uses thiscpuptr which requires migration to be disabled. All callers of rhtabdeleteelem disable migration except rhtabmaplookupanddeletebatc...
EUVD-2026-103952
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...
CVE-2026-98698 wifi: mac80211: handle empty FILS association request payload
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...
CVE-2026-98698 wifi: mac80211: handle empty FILS association request payload
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session element. cryptlen is then zero and aessivencrypt is called with an emp...
CVE-2026-98698
The Linux kernel contains a vulnerability in the wifi: mac80211 component when handling a FILS association request frame where the last element is a FILS Session element. Specifically, the function fils_encrypt_assoc_req() may receive a zero-length crypt_len, causing aes_siv_encrypt() to be calle...
Zin
Version 1.0 😎 Zin 😎 A Payload Injector for bugbounties written in go Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.13-1.hum1 aarch64, s390x, x8664 aspnetcore-runtime-dbg-10.0-10.0.13-1.hum1 aarch64, s390x, x8664 aspnetcore-targeting-pack-10.0-10.0.13-1.hum1 aarch64,...
AcuAutomate
AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile...
RepoReaper
RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...
ShellShock-CGI-Scan
ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...
awesome-web3-security
awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of ar...
My-Presentation-Slides
My-Presentation-Slides Collections of Dhiyaneshwaran public presentation slides. You can find me at: Blog: https://dhiyaneshgeek.github.io Twitter: @DhiyaneshDk Hackerone: Geek Freak LinkedIn: Dhiyaneshwaran Balasubramaniam 2026 Hands-On Supply Chain Recon & Vendor Risk Mapping Recon Village @ DE...
cve-2019-2215
CVE-2019-2215 Project Zero bug 1942...
CVE-2024-27630
CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...
Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-
Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 – 5.15.24, discovered by Max Kellermann in 2022. This...
zk-xml-probe
zk-xml-probe Static XML fixtures for authorized bug bounty testing of XML parser behaviour CVE-2026-45071...
Linux Distros Unpatched Vulnerability : CVE-2026-98698
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: handle empty FILS association request payload filsencryptassocreq accepts a ReAssociation Request frame whose last element is the FILS Session...
PT-2026-117087
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache replay, the writeback worker and the GC worker read a kset of get kset onmedia size bytes and advance the position by it. A forged key num makes that size exceed the...