CVE-2026-25769

🚨 CVE-2026-25769 — Небезопасная десериализация Wazuh с удалённым выполнением кода RCE Критический RCE: Worker ➜ Master в кластерном режиме Wazuh Небезопасная десериализация в кластерных коммуникациях Wazuh позволяет скомпрометированному worker-узлу выполнить RCE с правами root на master-узле. 📌...

BurpSuite-Grand-Master-Tools

BurpSuite-Grand-Master-Tools Автор:nu11secur1ty — модульный набор инструментов, преобразующий захваченные Burp запросы в мгновенные, повторяемые действия. Конвертируйте. Используйте повторно. Открывайте. Автоматизируйте. 🚀 Краткое описание BurpSuite-Grand-Master-Tools — это лёгкий, проверяемый и...

Learning-History-of-CFF-bug-in-iphone

Learning-History-of-CFF-bug-in-iphone Погружаемся в шрифт CFF и попутно узнаём о bof в разборе cff из какого-то джейлбрейка. просто ради интереса Итак.... что такое CFF? Насколько я знаю, это файловый формат, но давайте попробуем понять, что говорит Википедия: «CFF выступает в роли контейнера для...

AZL-101906 CVE-2026-93202 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

DEBIAN-CVE-2026-93199

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

AZL-102198 CVE-2026-93200 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

AZL-102134 CVE-2026-90386 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

DEBIAN-CVE-2026-90386

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-93202 i3c: master: Fix recursive locking during device registration

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

EUVD-2026-82310

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

CVE-2026-93200 i3c: master: Fix use-after-free of master->this

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

CVE-2026-93199

Linux kernel i3c master driver contains a logic flaw in the function i3c_master_search_i3c_dev_duplicate(). The function searches the I3C bus for another device sharing the same PID as a reference device, but can incorrectly match master->this—the I3C controller itself. Since the controller is...

CVE-2026-93200

CVE-2026-93200 affects the Linux kernel's i3c (Improved Inter-chip) master controller driver. The root cause is a use-after-free of the master->this pointer: it is freed in i3c_master_detach_free_devs() before the master device itself is released, yet sysfs attribute callbacks still dereferenc...

CVE-2026-93199 i3c: master: Do not treat master device as a duplicate target

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

EUVD-2026-82307

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3cmastersearchi3cdevduplicate searches the bus for another I3C device with the same PID as the reference device. The search can match master-this, causing the...

EUVD-2026-82308

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master-this sysfs attribute callbacks for the master controller device dereference master-this. However, master-this is freed in i3cmasterdetachfreedevs before the master device itself is...

EUVD-2026-82047

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

CVE-2026-90386

This Linux kernel vulnerability affects the DesignWare I3C master driver (drivers/i3c/master/dw-i3c-master.c:905). On an empty I3C bus, the ENTDAA (Enhanced Dynamic Address Assignment) command assigns no devices, causing cmd->rx_len to equal master->maxdevs. The resulting GENMASK() index be...

CVE-2026-90386 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices On an empty bus ENTDAA assigns nothing, so cmd-rxlen the count of addresses left unassigned equals master-maxdevs. The GENMASK index master-maxdevs - cmd-rxlen - 1 th...

neko-master

Neko Master 네트워크 트래픽을 명확하게 확인하세요. 실시간 모니터링 · 트래픽 감사 · 멀티 게이트웨이 지원 English | 中文 !IMPORTANT 면책 조항 이 프로젝트는 로컬 게이트웨이 환경을 위한 트래픽 분석 및 시각화 도구입니다. 어떠한 네트워크 접속 서비스, 프록시 구독, 또는 네트워크 간 연결도 제공하지 않습니다. 모든 데이터는 사용자 자신의 네트워크 환경에서 수집됩니다. 이 프로젝트는 MIT 라이선스에 따라 오픈소스로 공개됩니다. 본 소프트웨어 사용으로 인해 발생하는 어떠한 결과에 대해서도 책임을 지지...