Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hns: Fixed the issue where the CPU got stuck due to printouts during reset. During reset, commands to destroy resources such as qp, cq, and mr may fail, and error logs will be printed. When a large number of resources are...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: igb: A potential invalid memory access issue has been fixed in igbinitmodule. The pciregisterdriver function may fail. When this occurs, the dcanotifier needs to be unregistered. Otherwise, the dcanotifier can be called when igb...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed an invalid prog-stats access when updateeffectiveprogs fails. The issue occurs due to a fault-injected code sequence in updateeffectiveprogs. The problem can be described as follows: c cgroupbpfdetach...

kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

A flaw was found in the Linux kernel's netfilter connection tracking subsystem. The TCP option processing mechanism improperly assumes memory alignment when reading packet headers. A remote attacker could exploit this vulnerability by sending crafted TCP packets with misaligned SACK options throu...

kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE PoC для CVE-2025-7771. ThrottleStop.sys предоставляет два обработчика IOCTL, которые позволяют произвольное чтение/запись физической памяти без контроля доступа — любой процесс с правами администратора может читать или записывать в любом месте физической ОЗУ...

ALSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

RHEL 8 : libpcap (RHSA-2026:76045)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:76045 advisory. The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection,...

Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

MiracleLinux 9 : libpcap-1.10.0-4.el9_8.1 (AXSA:2026-1962:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1962:01 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description Les pilotes de bas niveau GPCIDrv et GDrv dans GIGABYTE APP Center v1.05.21 et versions antérieures, AORUS GRAPHICS ENGINE avant 1.57, XTREME GAMING ENGINE avant 1.26, et OC GURU II v2.08 exposent des fonctionnalités permettant de lire et d'écrire dans la...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE Этот эксплойт восстанавливает и использует CVE-2019-16098, который находится в драйвере Micro-Star MSI Afterburner 4.6.2.15658 также известном как RTCore64.sys и RTCore32.sys, позволяет любому аутентифицированному пользователю читать и записывать в произвольную...

SIOCtl

SIOCtl Простой диспетчер IOCTL Это универсальный «диспетчер» IOCTL. Я сделал его для использования в качестве POC для CVE 2018-8060 и 2018-8061, однако его можно применять к любому устройству, IOCTL и данным. Входные данные — это бинарный файл, содержащий необработанные данные, которые используют...

cve-2024-0519-rca-research

CVE-2024-0519 — RCA Исследование Артефакты анализа первопричин для CVE-2024-0519 выход за границы памяти V8, Chrome 120, эксплуатировался в реальных атаках. Исправление : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 Изученная версия V8 : 12.0.267.16 fbc4963bbff, ARM64 macO...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – Путаница типов в верификаторе eBPF → чтение/запись памяти ядра Обзор Тонкое целочисленное переполнение в отслеживании границ верификатора eBPF позволяет злоумышленнику создать программу eBPF, которая обращается к памяти ядра за пределами допустимых границ. Серьёзность:...

Rocky Linux 10.2 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_74442)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674442 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

Rocky Linux 9 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_74441)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674441 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC-эксплойт для драйвера EtdSupp диагностики HP CVE-2023-32673/PSR-2022-0209 Сборка Откройте в Visual Studio 2019 Соберите в конфигурации Release Любуйтесь или нет Краткое описание Довольно простой небольшой драйвер с чтением/записью виртуальной памяти, без MmMapIoSpace...

CVE-2026-104855

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk operations including memory.copy, table.grow, and array.copy can expose invalid intermediate state when an embedder mutates a Store in Store::epochdeadlinecallback or continues...