posta

Posta Posta — это инструмент для исследования междокументной передачи сообщений. Он позволяет отслеживать, изучать и эксплуатировать уязвимости postMessage, а также включает функции, такие как повторная отправка сообщений между окнами в любом подключенном браузере. Предварительные требования Goog...

CVE-2026-89617

A flaw was found in the Linux kernel's NTFS3 filesystem driver. An attacker with local access could craft a malicious NTFS log file. During log replay, insufficient validation of the lcnsfollow field in a DIRPAGEENTRY could lead to an out-of-bounds write. This memory corruption could result in a...

snapchange

Snapchange KVM을 사용한 메모리 스냅샷 경량 퍼징 Snapchange는 원시 메모리 덤프와 레지스터 상태를 KVM 가상 머신VM에 로드하여 실행할 수 있는 기능을 제공합니다. 실행 중 특정 시점에 이 VM은 KVM이 찾은 더티 페이지 또는 퍼저가 수동으로 더티하게 만든 페이지를 리셋하여 초기 상태로 재설정할 수 있습니다. 빠른 링크: Cookbook은 fuzz, trace, coverage, minimize, project 명령줄 유틸리티의 예제를 제공합니다 QEMU로 스냅샷 생성 아키텍처 퍼저 수명 주기 튜토리얼...

CVE-2026-89688

In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a reference on the nfs4stid sccount but takes no reference on the stateowne...

CVE-2026-89617

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIRPAGEENTRY ends in a pagelcns array whose length is the on-disk lcnsfollow field. checkrstbl validates the table bookkeeping but never checks that this array fits in the...

CVE-2026-80957

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

Ironsquirrel

IRONSQUIRREL Этот проект направлен на доставку эксплойтов для браузеров жертве в зашифрованном виде. Для согласования ключей используется эллиптическая кривая Диффи-Хеллмана secp256k1, а для шифрования — AES. Доставляя код эксплойта и шеллкод жертве в зашифрованном виде, атаку невозможно...

EUVD-2026-76600

In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a reference on the nfs4stid sccount but takes no reference on the stateowne...

CVE-2026-89688

CVE-2026-89688 is a Linux kernel vulnerability in the NFS server daemon (nfsd) , specifically in the error-handling path of nfs4_preprocess_seqid_op(). When nfsd4_cstate_assign_replay() returns -EAGAIN (replay owner being torn down), the code incorrectly called nfs4_put_stateowner() on a referenc...

CVE-2026-89688 nfsd: drop the stateid, not the stateowner, on seqid_op replay retry

In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a reference on the nfs4stid sccount but takes no reference on the stateowne...

CVE-2026-89688 nfsd: drop the stateid, not the stateowner, on seqid_op replay retry

In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on seqidop replay retry In nfs4preprocessseqidop the stateid is obtained from nfsd4lookupstateid, which holds a reference on the nfs4stid sccount but takes no reference on the stateowne...

CVE-2026-89664 nfsd: release OPEN-decoded posix ACLs via op_release

In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...

EUVD-2026-76529

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIRPAGEENTRY ends in a pagelcns array whose length is the on-disk lcnsfollow field. checkrstbl validates the table bookkeeping but never checks that this array fits in the...

CVE-2026-89617

CVE-2026-89617 affects the Linux kernel's NTFS3 filesystem driver (fs/ntfs3). The root cause is a missing size validation for the page_lcns[] array within each DIR_PAGE_ENTRY during log replay: check_rstbl() validates table bookkeeping but never confirms that the on-disk lcns_follow field does no...

CVE-2026-89617 fs/ntfs3: validate dirty page table on log replay

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIRPAGEENTRY ends in a pagelcns array whose length is the on-disk lcnsfollow field. checkrstbl validates the table bookkeeping but never checks that this array fits in the...

CVE-2026-89617 fs/ntfs3: validate dirty page table on log replay

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log replay Each DIRPAGEENTRY ends in a pagelcns array whose length is the on-disk lcnsfollow field. checkrstbl validates the table bookkeeping but never checks that this array fits in the...

CVE-2026-80957 dm-pcache: detect a cycle in the last-kset chain during replay

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

EUVD-2026-76280

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

CapTipper

CapTipper v0.3 CapTipper v0.3: http://www.omriher.com/2015/08/captipper-v03-is-out.html CapTipper v0.2: http://www.omriher.com/2015/03/captipper-02-released.html CapTipper v0.1: http://www.omriher.com/2015/01/captipper-malicious-http-traffic.html CapTipper — это инструмент на Python для анализа,...

ESP-RFID-Tool

ESP-RFID-Tool By Corey Harding 공식 웹사이트: www.rfid-tool.com 현재 April Brother에서 이 하드웨어를 제조하고 있으며 중국에서 직접 구매할 수 있습니다: 공식 스토어: https://blog.aprbrother.com/product/esp-rfid-tool AliExpress 스토어: https://www.aliexpress.com/item/ESP-RFID-Tool/32850151497.html Tindie 스토어:...