cve-2024-30350-research-notes

CVE-2024-30350 Research Notes Overview CVE-2024-30350 is an out-of-bounds read information disclosure vulnerability in Foxit PDF Reader. The issue was published by Trend Micro Zero Day Initiative as ZDI-24-333 and tracked before disclosure as ZDI-CAN-22708. The public advisory describes the...

Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite...

Arbitrary File Access

Docling is vulnerable to arbitrary file read and write. The vulnerability is due to the Tectonic engine compiling untrusted TikZ input without restricting file access, which allows an attacker to read accessible files and create or overwrite writable files, with potential command execution if she...

Event-ID-263-Rule-Name-SOC287---Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-

Este repositorio no tiene un README...

wp2shell-compromise-scanner-plugin

Compromise Scanner for wp2shell read-only A standalone, read-only WordPress plugin that scans your database and plugin directory for signs that the wp2shell core chain CVE-2026-63030 + CVE-2026-60137 was exploited — even if it happened weeks ago or the attacker cleaned up. It changes nothing on...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prueba de concepto para CVE-2025-27136 XXE en Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + Servicio S3 detectado + Creando bucket: xxe-32d14993 + Respuesta del servidor: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Recuperando archivo mediante ?location +...

CVE-2026-98238

A flaw was found in the Linux kernel's t7xx Wireless Wide Area Network WWAN driver. This vulnerability allows an attacker to cause a Denial of Service DoS by sending malformed network packets. The driver fails to validate the network interface index in incoming packet headers before indexing an...

GetFGPP

GetFGPP Dumps Fine Grained Password Policies FGPP from Active Directory via LDAP. Requires read access to the Password Settings Container — by default only admins have this right, but it's occasionally misconfigured. Install pip3 install ldap3 python-dateutil no longer required Usage usage: fgpp....

Poc_CVE-2025-68645

CVE-2025-68645 - Vulnerabilidad de Path Traversal en Zimbra 📋 Resumen CVE-2025-68645 es una vulnerabilidad de path traversal en Zimbra Collaboration Suite que permite a atacantes no autenticados leer archivos arbitrarios del sistema de archivos del servidor. Endpoint Vulnerable...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

A flaw was found in the Linux kernel's nvmet subsystem. An unauthenticated remote attacker could exploit an out-of-bounds heap read vulnerability in the Discovery Get Log Page function. By sending a specially crafted request with a manipulated offset, an attacker could read sensitive kernel memor...

CVE-2026-98204

A flaw was found in the Linux kernel's Synaptics RMI4 SMBus driver. When chunking write requests across the System Management Bus SMBus, the driver miscalculates the remaining data length for the final block. A local user can exploit this issue to trigger an out-of-bounds read past the input...

DEBIAN-CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

DEBIAN-CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

AZL-106914 CVE-2026-98384 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

CVE-2026-98384

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of skprotocol in bpfsockdestroy skprotocol lives in struct sock, not in struct sockcommon. A timewait or request sock handed to bpfsockdestroy by the tcp iterator is neither, so reading sk-skprotocol...

CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-19571

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...