EUVD-2026-76525

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid empty mapping pairs Reject an attribute with empty mapping pairs if it has inconsistent highest VCN and size...

CVE-2026-89613

CVE-2026-89613 affects the Linux kernel 's NTFS filesystem driver . The root cause is that the driver fails to reject an NTFS attribute with empty mapping pairs when the attribute carries an inconsistent highest VCN and size combination. The fix, as indicated by the description stating the vulner...

CVE-2026-89610

CVE-2026-89610 affects the Linux kernel NTFS filesystem driver. The mapping pairs decoder validates that a starting LCN is within the volume but does not check whether the run (LCN + length) extends beyond the volume boundary. A malformed NTFS image with a crafted mapping pairs array can cause th...

EUVD-2026-76522

In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...

CVE-2026-89610 ntfs: verify run length exceeding volume boundary

In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...

EUVD-2026-76506

In the Linux kernel, the following vulnerability has been resolved: hsi: omapssicore: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsialloccontroller, which does not go through the normal OF/platform device...

CVE-2026-89594

CVE-2026-89594 affects the Linux kernel component hsi: omap_ssi_core (OMAP SSI driver). The synthetic HSI controller device is allocated via hsi_alloc_controller(), bypassing the normal OF/platform device initialization path, so its embedded struct device has no DMA mask set. After recent DMA API...

CVE-2026-89528 svcrdma: Reject Read lists that exceed the page budget

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sending multiple segments whose cumulative length exceeds the rqpages arra...

EUVD-2026-76434

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sending multiple segments whose cumulative length exceeds the rqpages arra...

EUVD-2026-76421

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsiallocsgtables During fuzz testing, the following issue was discovered: BUG: KMSAN: uninit-value in dmamapsgattrs+0x217/0x310 dmamapsgattrs+0x217/0x310 dmamapsgattrs+0x4a/0x70...

CVE-2026-89515

CVE-2026-89515 is a Linux kernel vulnerability in the SCSI core subsystem, specifically in scsi_alloc_sgtables(). When processing the last unaligned scatterlist element, padding bytes (pad_len) remain uninitialized , causing an uninit-value access in __dma_map_sg_attrs (detected by KMSAN). The tr...

EUVD-2026-76360

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of pldainitinterrupts pldainitinterrupts initializes IRQ domains and creates IRQ mapping but does not unwind them when later step fails. If platformgetirq or either...

CVE-2026-80945 crypto: iaa - unmap dst before software fallback on decompress

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req-dst with the CPU while it is still mapped DMAFROMDEVICE. With SWIOTL...

CVE-2026-80945

This Linux kernel vulnerability affects the crypto: iaa (Intel Accelerated I/O Assist) driver. On a hardware analytics error during decompression, the software fallback writes to req->dst while it is still mapped DMA_FROM_DEVICE. With SWIOTLB active, the subsequent dma_unmap_sg() copies the st...

EUVD-2026-76257

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

CVE-2026-80934

CVE-2026-80934 affects the Linux kernel WiFi driver mt76 mt7996 (and mt7992). The root cause is a TX DMA mapping leak on AddBA request action frames: these frames use a HW MAC-TXP layout, but the TX-free path incorrectly decodes them as FW-TXP, causing the unmap loop to run zero times and the DMA...

CVE-2026-80934 wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames mt7996/mt7992 hand the firmware a HW MAC-TXP for AddBA req action frames MTTXD7MACTXD, set in mt7996macwritetxwi80211, but are otherwise FW-TXP devices. On tx free...

argus-wp-watcher

基于道德的 WordPress 漏洞扫描器——实时 CVE 关联、OWASP 映射、AI 驱动分析，以及基于同意的测试。 快速开始 · 文档 · Docker · AI 功能 · 在 GitHub 上点赞 实战演示 实时扫描 · WordPress 6.0.3 · 检测到 49 个 CVE · 18 个发现 · 耗时 47s !Argus HTML...

spyse.py

spyse.py 托管于 spyse.com 上的工具的 Python API 封装及命令行客户端。 "Spyse 是一款为互联网安全专业人士、企业及远程系统管理员、SSL/TLS 加密证书提供商、数据中心和业务分析师提供完整 DAAS（数据即服务）解决方案的开发商。所有 Spyse 在线解决方案均由主题服务组成，这些服务拥有统一的平台，用于收集、处理和聚合信息。" - spyse.com 支持以下 API： DNStable FindSubdomains CertDB ASlookup PortMap DomainsDB 注意：此 API 目前正处于活跃开发阶段。 更新内容...

awspx

auspex ˈau̯s.pɛks 名词：古罗马的一种占卜官，尤其指通过观察鸟类来解读预兆的人。 概述 awspx 是一款基于图的工具，用于可视化 AWS 中的有效访问和资源关系。它会解析策略信息，以确定 哪些 操作会影响 哪些 资源，同时考虑这些操作如何组合以产生攻击路径。与 Bloodhound 等工具不同，awspx 需要权限才能运行——在未授予这些权限的情况下，预计不会有太多用途。 目录 开始入门 安装 用法 贡献 许可证 更多信息，请查看awspx Wiki 开始入门 有关详细的安装说明、用法以及常见问题解答，请参见以下章节：设置、数据收集 和 数据探索 以及 常见问题。 安装...