CVE-2026-28867-PoC

CVE-2026-28867 Cómo funciona La vulnerabilidad existe porque la implementación del kernel de tcpsysctlinfo realiza una búsqueda global de la conexión sin verificar que el proceso que realiza la llamada sea el propietario del socket o posea privilegios elevados, como root. Impacto Un atacante sin...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: Transient DOS in WLAN Host and Firmware Overview This repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication frames to perform a denial of service DoS attack on a target access point AP by sendi...

CVE-2026-23010-CCSDS-Telecommand-Replay-Without-Sequence-Number

CVE-2026-23010 – CCSDS Telecommand Replay Without Sequence Number Program Code Python satellite sim satellitesim.py - Spacecraft that executes telecommands without checking sequence number class Satellite: def initself: self.executed = set def receivetcself, cmdid, seqnum: Vulnerability: ignores...

mountain_goat

Hola, soy una cabra montesa y voy a embestir tus conexiones TCP, porque eso es algo muy de cabras. Esta es una PoC que demuestra técnicas que explotan CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous por Yue Cao, Zhiyun Qian, Zhongjie Wang, Tuan Dao, Srikanth V...

OESA-2026-3768 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: DCCP: Fixed out-of-bounds access in the DCCP error handler. There was a previous attempt to fix out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only wanted to access the first 8...

EUVD-2025-210802

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via spoofed TCP FIN packets without validating the sequence or acknowledgment numbers...

CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

PT-2026-81317

Name of the Vulnerable Software and Affected Versions GNU wget versions prior to 1.25.0 Description GNU wget is susceptible to a denial of service in its FTP OPIE/S-KEY authentication functionality. The issue occurs because the software uses a server-supplied sequence number from the FTP challeng...

CVE-2026-16599: Unchecked Input for Loop Condition

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

CVE-2026-58087

The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced in the interim, but t...

CVE-2026-58087 Heap out-of-bounds access in semctl(2)

The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced in the interim, but t...

EUVD-2026-62364

The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced in the interim, but t...

CVE-2026-58087 Heap out-of-bounds access in semctl(2)

The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced in the interim, but t...

CVE-2026-58087

A heap out-of-bounds access vulnerability exists in the semctl(2) system call on FreeBSD . The GETALL and SETALL commands suffer from a flaw where they allocate a buffer based on a semaphore count, drop a lock, and then reacquire it. While a sequence-number check is intended to prevent use of a r...

PT-2026-78319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The GETALL and SETALL commands in the semctl function contain a flaw in how they handle semaphore sets. The process records the number of semaphores, releases th...

EUVD-2026-58978

In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ipvsseq structs in ipvsconnnew Commit 9a05475cebdd "ipvs: avoid kmemcachezalloc in ipvsconnnew" changed ipvsconnnew to allocate an ipvsconn object with kmemcachealloc. The function then initializes many fields...

PT-2026-72209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip vs conn new function where ip vs conn objects allocated via kmem cache alloc do not have their init seq and previous delta fields within the ip vs seq structure...

PT-2026-72837

In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send queue ordered In a benchmark scenario triggering a lot of requests that triggers a lot of DLM messages on the network it can be that the mh-seq is not ordered according the oldest seq number. This...

CVE-2026-68329

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommucompletionwait needsync is a per-IOMMU flag shared by all domains and devices behind that IOMMU. It is set whenever a command is queued with sync == true and clear...