CVE-2018-10732

CVE-2018-10732 Exploit-DB 发布地址：无披露！ Dataiku 供应商补丁与致谢： https://doc.dataiku.com/dss/latest/releasenotes/4.2.htmlsecurity 作者 Alex Hernandez 又名 @alt3kx...

auditpolCIS

auditpolCIS Windows SIEM構成のCISベンチマークテスト これは、Windows監査ポリシー設定をCISベンチマーク推奨設定と照らし合わせてテストするアプリケーションです。いくつかのポイント： テスト対象システムはWindows Server 2019で、使用したベンチマークもWindows Server 2019です。 スクリプトはSSHで接続します。SSHはWindows Server 2019に含まれていますが、有効にする必要があります。WinRM（または他の）接続タイプを希望する場合は、お知らせいただくかPRを送ってください。...

VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint

Windows 10 金融终端 SMB 漏洞利用 VAPT 报告 本报告概述了一次结构化的 VAPT 行动，重点涉及 PCI DSS 合规性、SMB 服务枚举，以及针对金融基础设施中一台 Windows 10 主机的 CVE-2017-0144（EternalBlue）漏洞利用。 🔐 引言 金融机构在网络安全领域面临着最为严苛的合规要求。由于事关敏感客户数据和持卡人信息，安全配置错误可能导致灾难性的数据泄露。本次 VAPT 模拟旨在从 PCI DSS 合规角度评估基于 Windows 10 的终端系统的安全态势，同时识别并利用暴露的 SMB 服务中的已知漏洞。 该模拟涵盖了多个阶段——从...

CVE-2026-80586

A flaw was found in the Linux kernel. A remote attacker could send a malformed Data Sequence Signal DSS with an incorrect size. This could lead to inconsistencies or access to uninitialized data within the kernel...

EUVD-2026-66501

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

CVE-2026-80586

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

AZL-97776 CVE-2026-80586 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

CVE-2026-80586 mptcp: options: reset DSS fields in case of unexpected size

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

CVE-2026-80586

CVE-2026-80586 affects the Linux kernel MPTCP (Multipath TCP) options handling. A remote peer can send a malformed DSS (Data Sequence Number) suboption with an incorrect size , followed by another DSS or MPC + Data. The first suboption is ignored, but some fields remain written , leading to incon...

CVE-2026-80586 mptcp: options: reset DSS fields in case of unexpected size

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but leaving some...

Linux Distros Unpatched Vulnerability : CVE-2026-80586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with a wrong size, followed by another DSS or MPC + Data. I...

PT-2026-82202

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A remote peer can send a malformed Data Sequence Signal DSS with an incorrect size, followed by another DSS or Multipath TCP MPTCP Control MPC and Data. This sequence causes the first...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/omap: dss: Fixed refcount leak issues In dssinitports and dssuninitports, we should call ofnodeput for the reference returned by ofgraphgetportbyid in the fail path or when it is no longer needed...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mptcp: handles DDS corruption consistently. The buggy peer implementation can send corrupted DSS options, consistently causing several warnings in the data path. Use DEBUGNET assertions to avoid errors on some builds and to handl...

UBUNTU-CVE-2026-68274

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask gdssmask to determine the number of entries to allocate: total =...

CVE-2026-68274 drm/xe/guc: Fix buffer overflow in steered register list allocation

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask gdssmask to determine the number of entries to allocate: total =...

Linux Distros Unpatched Vulnerability : CVE-2026-63867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: close TOCTOU race while computing rcvwnd The MPTCP output path access locklessly the MPTCP-level ackseq in multiple times, using possibly different value...

CVE-2026-63867

In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcvwnd The MPTCP output path access locklessly the MPTCP-level ackseq in multiple times, using possibly different values for the dataack in the DSS option and to compute the announced rcv...

CVE-2026-63867 mptcp: close TOCTOU race while computing rcv_wnd

In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcvwnd The MPTCP output path access locklessly the MPTCP-level ackseq in multiple times, using possibly different values for the dataack in the DSS option and to compute the announced rcv...

CVE-2026-63867

CVE-2026-63867 : In the Linux kernel, a TOCTOU race in MPTCP was resolved in the rcv_wnd computation. The MPTCP output path locklessly accesses the MPTCP-level ack_seq multiple times, potentially using different data_ack values from the DSS option to compute the announced rcv_wnd for the same pac...