staekka

Stækka Metasploit - 扩展 Metasploit 此 Msf 插件扩展了 Metasploit，补充了一些缺失的功能和模块，允许与其他/自定义的利用方式/获取 shell 访问的方法进行交互。当前的重点是 Linux/Unix 支持。 核心功能 TTY 支持：从 Metasploit 启动一个 shell，允许与 TTY 支持交互，并将会话迁移到 Metasploit 中。这允许自定义获取 shell 的方式（私有非 Metasploit 利用方式），并将此 shell 用作 Metasploit 会话以执行后渗透模块。还有另一个 SSH 模块，可在与会话交互时使用 T...

Linux Distros Unpatched Vulnerability : CVE-2026-98289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afunix: Unify sccindex when finalising SCC in unixwalkscc. Commit bfdb01283ee8 afunix: Assign a unique index to SCC. changed Tarjan's algorithm to update lowlin...

Linux Distros Unpatched Vulnerability : CVE-2026-98176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc The low 6 bits of cphqdeopcontrol store the base-2 logarithm of the EOP ring size. This was...

Linux Distros Unpatched Vulnerability : CVE-2026-98367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: Clear association under lock if siwqpmodify fails in siwaccept We need to clear cep before release statelock as siwqpllpclose and...

Linux Distros Unpatched Vulnerability : CVE-2026-98320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: hold reference on ct until flow is released nfctput releases the ct-ext area inmediately, the rcu typesafe semantics also allow to refer t...

Linux Distros Unpatched Vulnerability : CVE-2026-98211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: mmci: Fix use-after-free in busy-timeout work ux500busycomplete can queue ux500busytimeoutwork for an R1b command, but mmciremove never cancels it. The wor...

Linux Distros Unpatched Vulnerability : CVE-2026-98262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libahci: clear PxCLBU and PxFBU for AHCIHFLAG32BITONLY A user reported that commit 105c42566a55 ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 made...

Linux Distros Unpatched Vulnerability : CVE-2026-98354

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mad: Fix receive buffer leak when PKey enforcement fails ibmadcompleterecv initializes madrecvwc-rmpplist and then runs ibmadenforcesecurity before linking...

Linux Distros Unpatched Vulnerability : CVE-2026-98319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm: Fix drmpendingvblankevent leak in error path for outfenceptr When an outfenceptr is provided but DRMMODEPAGEFLIPEVENT is not set, a drmpendingvblankevent...

Linux Distros Unpatched Vulnerability : CVE-2026-98222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KEYS: encrypted: fix integer overflow of databloblen encryptedkeyalloc stores databloblen in a u16. It is computed from multiple string and payload lengths. If...

Linux Distros Unpatched Vulnerability : CVE-2026-98303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: icmp: reject RTNUNREACHABLE input routes in icmproutelookup When the forward output route cannot be used in icmproutelookup, it enters the reverse path an...

Linux Distros Unpatched Vulnerability : CVE-2026-98277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: ring the doorbell if a burst ends in a drop fbnictxmap skips the doorbell write, and the completion request, for every packet handed to it with...

Linux Distros Unpatched Vulnerability : CVE-2026-98323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/siw: Bound fragmented header copies by the remaining length siwgethdr can receive an extended DDP/RDMAP header across more than one TCP callback. The first...

Linux Distros Unpatched Vulnerability : CVE-2026-104044

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd. A local attacker can trigger a Denial of Service DoS by sending a specially crafted Pluggable Authentication Module PAM request when...

Linux Distros Unpatched Vulnerability : CVE-2026-104030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token...

CVE-2024-47176

CUPS Browsd 守护进程默认以 root 权限运行（在 Linux/Unix 系统中允许的情况下），允许网络中任何设备远程连接来创建新打印机。 启动 python post 服务器，然后发送添加打印机的请求，你将看到以 root 身份连接到你的 HTTP 服务器以添加打印机。...

[SECURITY] Fedora 45 Update: chemical-mime-data-0.1.94-44.fc45

A collection of data files which tries to give support for various chemical MIME types chemical/ on Linux/UNIX desktops. Chemical MIME's have been proposed in 1995, though it seems they have never been registered with IANA...

Linux Distros Unpatched Vulnerability : CVE-2026-104733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User Impersonation in ProcessOnes XMMP Server ejabberd = 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN...

Linux Distros Unpatched Vulnerability : CVE-2026-93925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before...

PEASS-ng v20261002-82d9fad1

PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Checkhttps://hacktricks-training.com/courses/lhe/ to learn tens of linux privesc techniques and master LinPEAS Basic Tutorial Here you will find privilege escalation tools for...