EUVD-2026-108905

In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200ms at hub resume triggers an AMD platform issue. Users running Android adb report crashes after adb has been polling and...

CVE-2022-21907

CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...

CVE-2026-98922

The Linux kernel contains a vulnerability in the emac driver causing a NULL pointer dereference during driver initialization. The issue stems from a netdev_need_ops_lock() check in phy_link_topo_add_phy() occurring before netdev_ops were determined. The root cause was triggered by a change in loc...

EUVD-2026-108886

In the Linux kernel, the following vulnerability has been resolved: net: emac: move setting of netops to fix crash fixes the following crash on driver initialization: |BUG: Kernel NULL pointer dereference on read at 0x00000158 |Faulting instruction address: 0xc0566b40 |Oops: Kernel access of bad...

EUVD-2026-108882

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damonptepmkold damonvaprepareaccesscheck picks a random byte address within the region and stores it in r-samplingaddr. damonvamkold passes it into a page table walk, which hands...

CVE-2026-98917

The Linux kernel experienced a vulnerability where the default kernel stack size for 64-bit parisc architectures was insufficient, leading to kernel crashes . Specifically, building the debian vtk9 package with gcc 17 triggered a kernel panic due to a low stack detected by the irq handler. The fi...

EUVD-2026-108881

In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit Linux kernels, increase the default kernel stack size THREADSIZEORDER to 32 kB, in order to avoid kernel crashes which have been triggered recently when building the debian vt...

CVE-2024-1441

This repo is made to reproduce fuzzing and analysis process of discovering CVE-2024-1441 11 used commands 2 commands to install packages apt-get update apt-get install 1 git command git clone 4 build commands meson ninja make cargo build 1 command to set environment values export 1 command to run...

CVE-2026-98884

The Linux kernel contains a vulnerability in the mmc core where an excessively large max_segs value provided by a host driver can be truncated to zero. This causes mmc_alloc_sg() to request a zero-sized allocation via kmalloc_objs(), returning a ZERO_SIZE_PTR under the SLUB allocator. Subsequent ...

EUVD-2026-108678

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Add validation for host-provided maxsegs The maxsegs field is of type unsigned short, and if a host driver sets an excessively large value, it may be truncated to zero. This can cause mmcallocsg to call kmallocobjs wit...

CVE-2026-98875

The Linux kernel contains a vulnerability in the drm/nouveau/gsp component involving the GA100 chip table . During the tu102_gsp_oneinit() function, the booter constructor requires device->sec2 to access the SEC2 falcon for booter-load and booter-unload firmware. Due to a missing .sec2 entry, ...

EUVD-2026-108721

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...

EUVD-2026-108718

In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG on unknown typed-extent type vxfsbmaptyped handles four typed-extent types and calls BUG in its default case, so an on-disk typed extent with any other type value crashes the kernel. It is reachable from...

CVE-2026-115722

The RPly library, versions through 1.1.4 , is vulnerable to an out-of-bounds function pointer index due to improper array index validation in ply_read_header_property(). The flaw occurs because the function accepts a list as a list property's length or value type. An attacker providing a crafted ...

CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， The sign of Poc success is the crash of the mqsvc.exe process, and there is no pop-up message, which needs to be seen in a process monitor-like program Execute command in windows terminal or command prompt python poc.py Enter IP addres...

pwnedit

pwnedit CVE-2021-3156 - Sudo Baron Samedit Before heading into the technical details, you can watch a brief summary here: https://www.youtube.com/watch?v=TLa2VqcGGEQ Episodes 1. Files | Blog | Video Why Pick sudo as Research Target? 2. Files | Blog | Video How Fuzzing with AFL works 3. Files | Bl...

anticuckoo

anticuckoo A tool to detect and crash Cuckoo Sandbox. Tested in Cuckoo Sandbox Official and Accuvant's Cuckoo version. Please, consider make a donation: https://github.com/sponsors/therealdreg Anticuckoo can also detect other sandbox like FireEye -c2: Reddit / netsec discussion about anticuckoo...

CVE-2026-98783

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. The driver fails to verify whether the display overlay adaptor platform device is successfully registered during initialization. If the registration fails, the system attempts to use an invalid memory pointer,...

EUVD-2026-108708

A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Notes: The "slider" question may also be vulnerable with a large integer instead of a string. It could not be confirmed in my local environment. Exploitation steps Open the survey page and find a text or comment field. Fill the survey normally. In the text or comme...