lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

CVE-2026-80684

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

CVE-2026-80620

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

CVE-2026-80621

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS DES capability, leaving pci-debugfs-rasdesinfo unset. The common debug...

CVE-2026-80684

In the Linux kernel, the following vulnerability has been resolved: K...

EUVD-2026-67560

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails, zdev-aibv will be NULL and fail when dereferenced in kvmzpcisetairq...

CVE-2026-80684

CVE-2026-80684 affects the Linux kernel in the KVM s390 PCI subsystem. The root cause is that airq_iv_create() may return NULL on allocation failure, but its return value was never checked. As a result, zdev->aibv remains NULL and is later dereferenced in kvm_zpci_set_airq(), causing a NULL po...

EUVD-2026-67527

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks pdev-bus when computing segmentid: u8 segmentid = pdev-bus ? pcidomainnrpdev-bus : 0; But the next two lines unconditionally dereference...

CVE-2026-80621

CVE-2026-80621 is a NULL pointer dereference in the Linux kernel's PCI DesignWare (DWC) driver . When a PCIe controller lacks a RAS DES capability, dwc_pcie_rasdes_debugfs_init() returns success but leaves pci->debugfs->rasdes_info unset. The common debugfs teardown path then unconditionall...

EUVD-2026-67497

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS DES capability, leaving pci-debugfs-rasdesinfo unset. The common debug...

CVE-2026-80621

In the Linux kernel, the following vulnerability has been resolved: P...

CVE-2026-80620

CVE-2026-80620 is a Linux kernel vulnerability in the PCI/MSI subsystem . A prior commit (1a8d4c6ecb4c) added an iounmap(dev->msix_base) on the error path of msix_capability_init(), but pci_free_msi_irqs() — called earlier via the __free(free_msi_irqs) cleanup — already unmapped the region and...

CVE-2026-80620

In the Linux kernel, the following vulnerability has been resolved: R...

EUVD-2026-67496

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

auditpolCIS

auditpolCIS CIS Benchmark-Tests der Windows SIEM-Konfiguration Dies ist eine Anwendung zum Testen der Konfiguration von Windows-Überwachungsrichtlinieneinstellungen gemäß den CIS-Benchmark-Empfehlungen. Einige Punkte: Das getestete System war Windows Server 2019, und der verwendete Benchmark war...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

cloudsploit

CloudSploit di Aqua - Scansioni di Sicurezza Cloud Avvio rapido Generico root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

CVE-2026-13216

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...

EUVD-2026-65597

The virtio PCI driver drivers/virtio/virtiopci.c parses a device's PCI capability list during driver initialization. In virtiopcireadcap the device-supplied capability length byte caplen read from PCI config space via pcieconfread was only checked with asserttmp.caplen == capstructsize. That asse...