CVE-2026-55222

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

fim-ebpf

FIM-eBPF: File Integrity Monitoring with eBPF A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF Extended Berkeley Packet Filter to trace file operations directly from the kernel, providing high-performance monitoring with minimal...

EUVD-2026-109069

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

CVE-2026-55222

The Isar root filesystem generation system (versions 0.11 and newer ) contains a flaw where the /etc/apt/trusted.gpg.d directory is manually created during bootstrap setup with ownership assigned to the calling user instead of root . If an unprivileged user shares the same ID as the calling user,...

CVE-2026-55222 Isar: Unprivileged user ownership of trusted repository GPG public keys storage after bootstrap

Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. By that, the directory is owned by the calling user the one that executes Isar instead of root. If...

CVE-2021-44228

CVE-2021-44228 On December 9, 2021, the world became aware of a new security vulnerability concerning Log4J. The CVSSv3 Common Vulnerability Scoring System score of the vulnerability was assessed as 10, making it critical https://nvd.nist.gov/vuln/detail/CVE-2021-44228. CVSSv3 Its CVSSv3 vector i...

CVE-2026-99087

The Linux kernel contains a vulnerability in the dm-integrity component where a NULL pointer dereference occurs during dm_integrity_resume. This issue is triggered when a device has the SB_FLAG_DIRTY_BITMAP flag set and is activated in 'R' mode , causing the function to incorrectly attempt to rea...

EUVD-2026-108938

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

CVE-2026-99087

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

CVE-2026-99087 dm-integrity: fix NULL pointer dereference when the 'R' flag is used

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

EUVD-2026-108937

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...

CVE-2026-99086

A vulnerability exists in the Linux kernel within the dm-integrity component. The dm_integrity_resume() function re-reads the superblock from the device without validation, while in-memory structures are sized based on the validated superblock read during the constructor. An attacker can modify t...

CVE-2026-99086

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...

CVE-2026-99086 dm-integrity: validate the superblock on resume

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dmintegrityresume re-reads the superblock from the device so that it picks up the flags and the recalculate position. It performs no validation on the result, while the constructor...

pfsense-wol-get-all

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-wol-get-all pfsense-wol-get-all Class: CSRF Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org serviceswol.php still has $REQUEST'wakeall' and href="serviceswol.php?wakeall=true" without usepost...

CVE-2024-30051

Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2024-30051 Published August 15 of 2024 In this blog post, I will explain a vulnerability in the Microsoft Windows DWM Core library that I analyzed when the exploit for Core Impact was being developed. Allows an unprivileged attacke...

CVE-2024-21305

CVE-2024-21305 This repo contains the report and PoC of CVE-2024-21305, the non-secure Hypervisor-Protected Code Integrity HVCI configuration vulnerability. This vulnerability allowed arbitrary kernel-mode code execution, effectively bypassing HVCI, within the root partition. For the root cause,...

CVE-2026-89320

HmacShaCryptor.Hash never hashed its input. For any input it returned HMACK"" — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext...

CVE-2022-22715

Blogpost: https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe Exploit needs to be executed from LOW INTEGRITY Cleanup is not completed. The exploit just fix the overwritten TOKEN objects but not the VS pool structure. This part is explained in the...

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection

CVE-2024-41302-Bookea-tu-Mesa-is-vulnerable-to-SQL-Injection- Bookea-tu-Mesa is susceptible to a SQL Injection SQLi vulnerability. This flaw allows attackers to inject malicious SQL commands that can manipulate the database, potentially compromising the application's data integrity and security...