4905 matches found
scutum
SCUTUM 防火墙 简介 简而言之，SCUTUM 自动配置您的个人计算机，抵御恶意 TCP/UDP 流量和 ARP 欺骗攻击。 该软件使用 UFW 为您设置传统防火墙，确定并锁定网关 MAC 地址，从而防止被 ARP 欺骗。 本软件设计紧凑高效。目前一次仅支持一个接口。流量仅允许通过一个接口。我们正在研究同时支持多个接口的可能性。 2.10.2（2019年5月5日） 1. 修复了 nftables 的 ARP 问题。ARP 数据包现在已正确在 arp 表中被阻止，而非 inet 表。 2. 将格式化字符串替换为 f-string。 2.10.0（2018年11月2日） 1. 修复了首次...
CVE-2022-3910
CVE-2022-3910 poc dirtyfile dirtymm...
initroot
initroot：摩托罗拉引导加载程序内核命令行注入安全启动与设备锁定绕过 CVE-2016-10277 作者：Roee Hay / Aleph Research, HCL Technologies 第一阶段漏洞利用：临时越狱 该漏洞利用可在设备上获得临时的无限制 root 访问权限。 例如，在 cedric 上（部分消息已移除以提高可读性）： root@kitploit: $ cd ./tethered/cedric $ ./initroot-tethered.sh Welcome to initroot-cedric-tethered ... bootloader bootloade...
CVE-2024-30088-Windows-poc
CVE-2024-30088-Windows-poc 该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。 提权因为需要条件竞争，所以需要耐心等待一会...
VQ-RefluxCore
VQ-RefluxCore：内核漏洞评估与研究框架 VQ-RefluxCore 是一个高级安全研究框架，用于建模、分析和演示与内核级竞争条件和文件系统结构漏洞（CVE-2026-64600 / RefluXFS）相关的本地权限提升（LPE）机制。 👤 开发者与元数据 属性| 详细信息 ---|--- 开发者| VulnQuest GitHub 账号| @vulnquest58 框架版本| 2.0.0 RefluxCore 发布日期| 2026年7月24日 分类| LPE 研究与安全审计框架 🎯 目标漏洞：CVE-2026-64600 RefluXFS CVE-2026-64600 代表了...
Linux Distros Unpatched Vulnerability : CVE-2026-93202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, ...
Linux Distros Unpatched Vulnerability : CVE-2026-90258
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking...
AZL-101906 CVE-2026-93202 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...
CVE-2026-93202
CVE-2026-93202 is a deadlock vulnerability in the Linux kernel i3c master driver. The function i3c_master_register_new_i3c_devs() calls device_register() while holding i3c_bus_normaluse_lock() (a read-side rwsem). The resulting device probe callback may invoke I3C helpers that re-acquire the same...
EUVD-2026-82310
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...
CVE-2026-90258
This vulnerability affects the Linux kernel pinctrl airoha driver. The root cause is a missing .irq_request_resources callback, which prevents gpiolib from setting GPIOD_FLAG_USED_AS_IRQ. As a result, pin direction locking is broken, allowing userspace or another driver to reconfigure an active I...
Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500328)
The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500328 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40035126 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft...
CVE-2022-2602
CVE-2022-2602 该仓库包含针对 CVE-2022-2602 的漏洞利用代码。有两个版本： 使用 userfaultfd 技术的漏洞利用。 使用 inode 锁定技术的漏洞利用。 尽情享用！ : LukeGix...
CVE-2026-80919
A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker could trigger a hung job, causing the amdgpudevcoredumpformat function to recursively acquire a lock. This recursive locking can lead to a self-deadlock, resulting in a Denial of Service DoS where the system becomes...
CVE-2026-56914
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-78962
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56914
In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56914
CVE-2026-56914 is a use-after-free vulnerability in the Google eXperience Processor kernel component of Google Pixel devices, caused by improper locking in multiple locations. It allows local escalation of privilege with low privileges required and no user interaction (CVSS 3.1: 7.8 HIGH ). CISA'...