staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

CVE-2024-47176

CUPS Browsd daemon which is by default running as root if allowed in Linux/Unix systems, allow remote connections from any device on the network to create a new printer. Start the python post server and then send the request to add the printer you will se a connection to your http server as root ...

Linux Distros Unpatched Vulnerability : CVE-2026-119130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path- with-query values in wasmtime-wasi-http are paths, so...

Linux Distros Unpatched Vulnerability : CVE-2026-118693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::createimagefromxml that trusts unvalidated embedded-file 'filename'...

Linux Distros Unpatched Vulnerability : CVE-2026-117945

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6...

Linux Distros Unpatched Vulnerability : CVE-2026-99104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor scxbypass claims bypass dispatch when the scheduler's depth goes from zero to one...

Linux Distros Unpatched Vulnerability : CVE-2026-99122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock/vmci: validate packet source for connected sockets vmcitransportrecvstreamcb looks up sockets first by the full source and destination tuple, then by...

Linux Distros Unpatched Vulnerability : CVE-2026-99136

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-crypt: fix a tiny race condition in cryptdecpending cryptdecpending reads io-error before calling atomicdecandtest. Another context, for example cryptendio...

Linux Distros Unpatched Vulnerability : CVE-2026-99192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on...

Linux Distros Unpatched Vulnerability : CVE-2026-99134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: fix data race and NULL deref on local-assocdev local-assocdev is shared between the association path and the association-response worker without comm...

Linux Distros Unpatched Vulnerability : CVE-2026-99168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshvvtl: Check per-CPU register page before mmap Register-page setup is optional for each CPU. If allocation or registration fails, mshvvtlconfigureregpage warn...

Linux Distros Unpatched Vulnerability : CVE-2026-99152

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Validate the task named by a management response iscsicompletepdu fetches the task for five response types from one place and checks only that...

Linux Distros Unpatched Vulnerability : CVE-2026-99160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ring-buffer: Do not show buffermeta for CPUs without a buffer The percpu/cpuN/buffermeta files are created for every possible CPU, but buffer-bufferscpu is only...

Linux Distros Unpatched Vulnerability : CVE-2026-98952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pfcp: make sure the SEID is linear before reading it pfcpencaprecv only makes sure that the UDP header and the 4 byte PFCP header are in the linear area. When t...

Linux Distros Unpatched Vulnerability : CVE-2026-98913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step...

Linux Distros Unpatched Vulnerability : CVE-2026-93536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14...

Linux Distros Unpatched Vulnerability : CVE-2026-79611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when DB in intercepted, Single Stepping is activ...

Linux Distros Unpatched Vulnerability : CVE-2026-79610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which...

Linux Distros Unpatched Vulnerability : CVE-2026-98842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - module: fix lost error code from codetagloadmodule If codetagloadmodule fails, err is not set to reflect the failure and loadmodule returns 0 after the module h...

Linux Distros Unpatched Vulnerability : CVE-2026-98781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/mediatek: Fix pdev reference leak in mtkdrmbind When the device is not the mmsys master, mtkdrmbind returns early after taking a reference on the disp-mutex...