s6_pcie_microblaze

PCI Express DIY hacking toolkit General information Contents SP605 board configuration Software configuration Examples Using Python API Practical DMA attacks Option ROM attacks Troubleshooting Building project from the source code General information This repository contains a set of tools and...

auditpolCIS

auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint

VAPT Report on SMB Exploitation in Windows 10 Finance Endpoint This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 EternalBlue on a Windows 10 machine within a finance-oriented infrastructure. 🔐 Introduction...

CVE-2026-99124

A flaw was found in the Linux kernel's s390 PCI subsystem. A local user can trigger an out-of-bounds read and potential information disclosure by submitting an error report with a claimed length greater than the actual payload provided. This flaw causes uninitialized kernel memory past the...

CVE-2026-99124

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

CVE-2026-99124

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

CVE-2026-99124 s390/pci: Fix leak of uninitialized kernel data in SCLP report

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

EUVD-2026-111876

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

CVE-2026-99124

The Linux kernel contains a vulnerability in the s390/pci component where uninitialized kernel data can be leaked via SCLP reports . The root cause is in report_error_write(), which fails to verify if the provided buffer is large enough to accommodate the length claimed by report->length. If u...

CVE-2026-99124 s390/pci: Fix leak of uninitialized kernel data in SCLP report

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

kernel: vfio/pci: clear vdev->msi_perm after freeing it on init failure

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...

ALSA-2026:91565 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel: net: shaper: rework the VALID marking agai...

UBUNTU-CVE-2026-99124

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the lengt...

PT-2026-128117

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kernel data in SCLP report While report error write checks that the provided buffer is at least as large as the header struct, but not that it is large enough to contain the report with the...

Linux Distros Unpatched Vulnerability : CVE-2026-99124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/pci: Fix leak of uninitialized kernel data in SCLP report While reporterrorwrite checks that the provided buffer is at least as large as the header struct,...

RLSA-2026:89814 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled CVE-2026-74515 For more details about the security issues,...