163 matches found
Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-
Linux-Kernel Dirty Pipe Ausnutzung Logikfehler von: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 ist eine der bedeutendsten Sicherheitslücken im Linux-Kernel 5.8 – 5.15.24, entdeckt von Max Kellermann im Jahr 2022. Diese Schwachstell...
CVE-2026-0073-Android-client-TLS-auth-bypass
CVE‑2026‑0073 — это логическая ошибка в демоне ADB adbd Android, которая позволяет злоумышленнику обойти взаимную аутентификацию TLS и открыть удалённую оболочку на устройстве, на котором включена беспроводная отладка и которое было сопряжено с любым компьютером хотя бы один раз. Коренная причина...
physmem
physmem physmem é uma ferramenta de inspeção de memória física e escalada de privilégio local direcionada ao macOS até a versão 10.12.1. Ela explora CVE-2016-1825 ou CVE-2016-7617 dependendo do alvo de implantação. Essas duas vulnerabilidades são quase idênticas, e a exploração pode ser feita...
CVE-2024-20674
CVE-2024-20674 Questa è la mia implementazione di un exploit della CVE pubblica CVE-2024-20674 per ottenere il bypass dell'autenticazione reciproca Kerberos utilizzando un bug logico nella gestione lato client delle risposte TGT-REP U2U di Kerberos. Può essere utilizzato, ad esempio, per servire...
RingBufferDetonator
Detonatore del Ring Buffer Questo è un programma proof-of-concept per innescare e dimostrare un bug logico in rbpercpuempty. I programmi che colpiscono il bug rimarranno bloccati in un ciclo morto nello spazio kernel in tracingreadpipe e impossibili da sospendere o terminare usando qualsiasi...
check-cve-2026-23111
CVE-2026-23111 Defensives Validierungsskript Übersicht CVE-2026-23111 ist eine Schwachstelle im Linux-Kernel in nftables, die von einem unprivilegierten Benutzer zur lokalen Privilegienausweitung auf Systemen ausgenutzt werden kann, auf denen Benutzer-Namespaces und nftables verfügbar sind.12...
wordpress-batch-rce-lab
wp2shell: WordPress Batch RCE Un'analisi tecnica di CVE-2026-63030, un bug logico nell'endpoint batch dell'API REST del core di WordPress che consente a una richiesta anonima di essere eseguita sotto la rotta e il controllo dei permessi di una richiesta diversa, concatenandosi in CVE-2026-60137 S...
CVE-2026-65915
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...
CVE-2026-65915
NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...
CVE-2026-72099
Summary (CVE-2026-72099) In the Linux kernel, the dm-integrity component had an issue where hash_offset could be incremented twice; the loop already increments hash_offset, so a second increment was unnecessary. The vulnerability was resolved by correcting this behavior in the relevant code path ...
PT-2026-72419
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv send tt request allocates a tt req node when none exists for the destination originator node. This should prevent that a multiple TT requests are send at the same...
CVE-2026-68354
In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnetfragnew keeps a sorted list of received fragments for a partial datagram. When a new fragment is adjacent to an existing fragment, the code checks whether the new fragment al...
SUSE-RU-2026:21783-1 Recommended update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix one issue The following non security issue was fixed: - CVE-2026-46333: Fixed logic bug in the Linux kernel's ptracemayaccess function bsc1265308...
Linux Distros Unpatched Vulnerability : CVE-2026-43450
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfnetlinkcthelper: fix OOB read in nfnlcthelperdumptable nfnlcthelperdumptable has a 'goto restart' that jumps to a label inside the for loop body...
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
...
CVE-2026-23356 drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
In the Linux kernel, the following vulnerability has been resolved: drbd: fix "LOGIC BUG" in drbdalbeginiononblock Even though we check that we "should" be able to do lcgetcumulative while holding the device-allock spinlock, it may still fail, if some other code path decided to do lctrylock with...
CVE-2026-23356
In the Linux kernel, the following vulnerability has been resolved: drbd: fix "LOGIC BUG" in drbdalbeginiononblock Even though we check that we "should" be able to do lcgetcumulative while holding the device-allock spinlock, it may still fail, if some other code path decided to do lctrylock with...
CVE-2024-34353
The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...
CVE-2025-58149
CVE-2025-58149 affects the Xen hypervisor. The detach logic for PCI devices fails to remove access permissions to 64‑bit memory BARs when a device is unplugged, allowing PV guests to access memory of devices no longer assigned to them (HVM implications noted with required compromised device model...
