isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

qrv

QRV — a QNX Neutrino-based operating system, re-imagined for 64-bit RISC-V QRV is a ground-up adaptation and re-implementation of the QNX Neutrino 6.4 operating system for modern 64-bit hardware, with RISC-V rv64g as the primary architecture and x86-64 as a secondary target. The project started o...

UBUNTU-CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

DEBIAN-CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-106589

The OpenSSH sshd daemon (versions through 10.6) is vulnerable to a Least Privilege Violation (CWE-272) in specific environments, notably QNX 6 and SCO OpenServer 5 . The flaw allows sshd-session to unexpectedly gain root privileges . This issue stems from the GatewayPorts and StreamLocalForwardin...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

CVE-2026-106589

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged...

PT-2026-107306

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.7 Description In certain environments, such as QNX 6 and SCO OpenServer 5, the sshd-session process can unexpectedly obtain root privileges. This issue occurs due to a lack of support for unprivileged allocation of...

CVE-2026-25278

CVE-2026-25278 is a TOCTOU race condition in Qualcomm's automotive software platform based on QNX . The vulnerability occurs during I2C transfer request processing , where a race between memory allocation and data copying leads to memory corruption . The CVSS v3.1 score is 7.8 (High) with a local...

CVE-2026-25278 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

CVE-2026-25278 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BlackBerry QNX. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of KEV...

CVE-2026-40272

CVE-2026-40272 involves an improper input validation in the decode() function of the traceparser library. The issue affects processes that use libtraceparser on QNX hosts/targets and can be triggered by a corrupted kernel trace event log (.kev) file. The underlying consequence is the potential ex...

EUVD-2026-50441

Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...

PT-2026-65862

Name of the Vulnerable Software and Affected Versions BlackBerry QNX affected versions not specified Description Improper input validation in the decode function of the traceparser library allows an attacker to use a corrupted kernel trace event log .kev file to execute arbitrary code or cause a...

CVE-2026-40272: Improper Validation of Specified Quantity in Input

Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...