cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

libsigrok

README The sigrok project aims at creating a portable, cross-platform, Free/Libre/Open-Source signal analysis software suite that supports various device types such as logic analyzers, oscilloscopes, multimeters, and more. libsigrok is a shared library written in C which provides the basic API fo...

IPI-exposure-signal

IPI Exposure Signal This is the code repository for our paper: Your Agentic LLMs Secretly Encode Latent Signals of Indirect Prompt-Injection Exposure. ArXiv version and paper link: https://arxiv.org/abs/2608.02657 This repository implements the probing pipeline for latent IPI-exposure signals:...

key-transparency-auditor

key-transparency-auditor A reference implementation of a third-party auditor for Signal's key transparency service, based on the key transparency specification. Overview This service is written in Java using the Micronaut framework. To build and unit test, run ./mvnw clean test in the root...

CVE-2026-113380

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call with its audio and perhaps also video track down...

CVE-2026-113380

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call with its audio and perhaps also video track down...

EUVD-2026-104796

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call with its audio and perhaps also video track down...

CVE-2026-113380

The RingRTC library (versions before 2.72.0 ) used by Signal is vulnerable to a flaw where a remote peer can saturate a call's FSM queue . This saturation can interfere with a local user's ability to hang up a call , potentially preventing the termination of audio and video tracks. The vulnerabil...

CVE-2026-113380

In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call with its audio and perhaps also video track down...

Signal K Server <= 2.18.0 - Information Disclosure

Signal K Server versions up to and including 2.18.0 expose the /skServer/serialports, /skServer/availablePaths, and /skServer/hasAnalyzer endpoints without authentication. These routes were missing from the authentication middleware configuration, letting any unauthenticated user retrieve the ful...

CVE-2024-6387-POC

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

CVE-2024-6387

Vulnerability Description CVE-2024-6387 exploit targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. Due to calling an async-signal-unsafe function in the SIGALRM handler, this vulnerability allows remote code execution as root. Vulnerability Summary Th...

kernel: signal: Prevent exec() race

A flaw was found in the Linux kernel's signal handling subsystem. A race condition occurs during process execution when managing pending timer signals, allowing the system to reference memory after it has been released. A local attacker could exploit this use-after-free flaw to achieve privilege...

cve-2025-66398

⚠️ cve-2025-66398 - Simple RCE Proof of Concept Tool ⚙️ About This Tool This project demonstrates a remote code execution RCE vulnerability in Signal K Server versions 2.18.0 and earlier. The proof of concept PoC shows how an attacker could run commands on a vulnerable device. This tool is designed...

CVE-2024-6387-Race-Condition-in-Signal-Handling-for-OpenSSH

CVE-2024-6387: Race Condition in Signal Handling for OpenSSH Overview CVE-2024-6387 is a critical vulnerability discovered in OpenSSH's server sshd that allows an attacker to potentially achieve unauthenticated remote code execution RCE as root. The vulnerability arises from a race condition in t...

dBmonster

With dBmonster, you are able to scan for nearby WiFi devices and track them through the signal strength dBm of their sent packets. Therefore, you can identify the exact location of nearby WiFi devices use a directional WiFi antenna for the best results or find out in which direction your self mad...

CVE-2024-6387

CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's server...

regreSSHion

Qualys Security Advisory regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems CVE-2024-6387 ======================================================================== Contents Summary SSH-2.0-OpenSSH3.4p1 Debian 1:3.4p1-1.woody.3 Debian 3.0r6, from 2005 Theory Practice Timing...

rootkit-signal-hunter

Rootkit Signal Hunter Detect Linux rootkits which use signals to elevate process privileges. Some rootkits install signal handlers which listen for specific signals to elevate privileges. This tool can identify these rootkits by sending signals and observing UID switching to root. Optionally spaw...

signal-without-smartphone

Setup Signal without smartphone A Desktop application to register an account with Signal and link it with Signal Desktop, all without requiring a smartphone. This utility avoids the need of a smart phone, but still requires a way to receive SMS messages during the setup phase. Signal recently...