EUVD-2026-67541

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

EUVD-2026-67533

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

CVE-2026-80650

CVE-2026-80650 affects the Linux kernel 's media: atomisp: gc2235 camera sensor driver. The root cause is incorrect error-path handling in gc2235_probe(): if media_entity_pads_init() fails, the probe routine calls gc2235_remove() which frees the device structure, but execution then falls through ...

EUVD-2026-67526

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

CVE-2026-80623

CVE-2026-80623 affects the Linux kernel Coresight ETE (External Trace Extension) subsystem. System register ETMs and ETE state is unlikely to be preserved on CPU power down , yet no device-tree or ACPI binding existed to signal this behavior, so the save_state logic was never correctly configured...

EUVD-2026-67499

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down System register ETMs and ETE are unlikely to be preserved on CPU power down. The ETE DT binding also never documented "arm,coresight-loses-context-with-cpu" so nobody would have...

CVE-2026-80620

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

EUVD-2026-67496

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

CVE-2026-80613

CVE-2026-80613 affects the veth driver in the Linux kernel. During XDP enablement , if xdp_rxq_info_reg() or xdp_rxq_info_reg_mem_model() fails, the rollback loop decrements the loop index before the first iteration (for (i--; i >= start; i--)), erroneously skipping the netif_napi_del() call f...

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

MAL-006

MAL-006: Entidade Externa XML em "Try It" no WSO2 ESB Um ataque de Entidade Externa XML XXE baseado em erro foi identificado na ferramenta "Try It" do WSO2 ESB. Por que não há CVE? O fornecedor respondeu que "é recomendado desabilitar o Try It em produção" e nenhuma divulgação pública foi feita...

CVE-2024-12849

CVE-2024-12849 Error Log Viewer di WP Guru = 1.0.1.3 - Autorizzazione mancante per la lettura arbitraria di file senza autenticazione Descrizione Il plugin Error Log Viewer di WP Guru per WordPress è vulnerabile alla lettura arbitraria di file in tutte le versioni fino alla 1.0.1.3 inclusa, trami...

CVE-2025-57819_FreePBX-PoC

FreePBX SQL Injection Checker 🔍 Sicherer, schreibgeschützter SQLi-Detektor für FreePBX’s /admin/ajax.php mit Fokus auf die Parameter template, model und brand. 🛡️ Verwendet fehlerbasierte , boolesche und zeitbasierte Techniken, um potenzielle Injektionen zu kennzeichnen, ohne die Datenbank zu...

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

CVE-2023-40130

https://wrlus.com/android-security/bindservice-error-handle/...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

phpstan

PHPStan - Strumento di Analisi Statica PHP PHPStan si concentra sulla ricerca di errori nel tuo codice senza effettivamente eseguirlo. Rileva intere classi di bug ancor prima di scrivere test per il codice. Avvicina PHP ai linguaggi compilati nel senso che la correttezza di ogni riga di codice pu...

setcred

FreeBSD setcred2 — artefatti di ricerca Questa sottodirectory raccoglie il write-up e gli exploit funzionanti per il buffer overflow nello stack di setcred2 nel kernel FreeBSD 14.x. La vulnerabilità è completamente documentata in setcred.txt. La versione breve: kernsetcredcopyinsuppgroups usa...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...