vulns-2026-fatfs-chance

ELM FatFs 漏洞研究 本仓库记录了 FatFs 中六个经确认的安全漏洞，以及一个测试工具套件、模糊测试器和独立的漏洞利用磁盘镜像生成器。 原始 FatFs 源代码可在 FatFs-R0.16 目录中找到。 该项目是对 2017 年一次安全评估的回顾，当时通过手动审计和多日模糊测试在 FatFs 驱动中发现了一些基础但无趣的漏洞。九年后，即 2026 年 3 月，我们使用 Visual Studio Code、GitHub Copilot（自动模式）和一些基本提示重新审视了该项目，没有使用任何特定的循环、工具或技能。结果令人惊讶——在手动审计中忽略的漏洞变得易如反掌，因为 LLM...

machofile

machofile machofile es un módulo para analizar archivos binarios Mach-O, con un enfoque en el análisis de malware y la ingeniería inversa. Inspirado en el pefile de Ero Carrera, este módulo pretende ofrecer capacidades similares pero para binarios Mach-O. El material de referencia y la...

fat-finger

Fat-Finger ========== 扩展了原始的 finger.nse，尝试通过用户名完全匹配和 /etc/passwd 中 GECOS 字段的部分匹配来枚举当前已登录用户。 示例输出： root@kitploit: @output PORT STATE SERVICE 79/tcp open finger | fat-finger: finger: admin: no such user. | finger: unix: no such user. | finger: dba: no such user. | finger: oracle: no such user. |...

fatcat

fatcat 本工具设计用于操作FAT文件系统，以便进行探索、提取、修复、恢复和取证分析。目前支持FAT12、FAT16和FAT32。 教程与示例 构建与安装 你可以这样构建 fatcat： root@kitploit: mkdir build cd build cmake .. make 然后安装它： root@kitploit: make install 探索 使用 fatcat Fatcat 将镜像作为参数： root@kitploit: fatcat disk.img options 注意：根据你的构建方式，可能需要在disk.img 之前指定选项，即 fatcat option...

CVE-2026-90318

CVE-2026-90318 affects the Linux kernel FAT filesystem. The vulnerability is a resource leak in fat_rebuild_parent(), which is used to rebuild the parent inode in the nostale_ro NFS export path . After a successful scan via fat_scan_logstart(), the matching directory entry's buffer head (sinfo.bh...

CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONType RCE PoC ★ 概述 CVE-2026-16723 是 Fastjson 1.x （1.2.68 – 1.2.83）中的一个 远程代码执行（RCE） 漏洞。 当 Fastjson 解析攻击者控制的 JSON 时，精心构造的 @type 值会在 checkAutoType 内部被转换为类资源查找。在 Spring Boot 可执行 fat-JAR 中，类加载器将该名称解析为 jar:http:// URL 并获取远程 JAR（SSRF），随后即使 AutoTy...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fat: Fixed an uninitialized field in the nostale filehandles. When the fatencodefhnostale function encodes a file handle without a parent handle, it only stores the first 10 bytes of the file handle. However, the length of the fi...

CVE-2026-69347

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

CVE-2026-68878

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73226

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

CVE-2026-69347

CVE-2026-69347 is a heap-based buffer overflow in the Windows Fast FAT Driver that allows an unauthorized attacker to achieve local code execution . The vulnerability is rated HIGH (CVSS 3.1: 7.4) with a local attack vector, high complexity, no required privileges, and no user interaction, result...

EUVD-2026-73204

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-68878

CVE-2026-68878 is a stack-based buffer overflow in the Windows Fast FAT Driver that allows an authorized attacker to elevate privileges over a network . The CNA (Microsoft) assigned a CVSS 3.1 score of 8.0 (HIGH) with the vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable e...

Windows Fast FAT Driver Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...

Windows Fast FAT Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

Exploit for CVE-2026-16723

CVE-2026-16723 Fastjson RCE ★ CVE-2026-16723 Fastjson @JSONT...

The vulnerability of the Linux operating system’s kernel module fat allows a hacker to cause a service failure.

The vulnerability of the fat kernel module in the Linux operating system is related to a significant loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure using a corrupted FAT image...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100769)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100769 advisory. In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir Corrupted FAT images can leave a directory inode...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3126)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bridge: brndsend: linearize skb before parsing ND optionsCVE-2026-31682 media: mc, v4l2: serialize REINIT and REQBUFS with...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-3071)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : bridge: brndsend: linearize skb before parsing ND optionsCVE-2026-31682 media: mc, v4l2: serialize REINIT and REQBUFS with...