AirDroidPwner

AirDroidPwner CVE-2019-9599 このエクスプロイトはもはや機能しません Video PoC Exploit: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 AirDroidとは？ AirDroid は、ブラウザを介してコンピュータをリモート制御するための最も知られ、利用されているツールの1つです。 仕組み？...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

CVE-2024-27686

MikroTik RouterOS サービス拒否（DoS）の脆弱性 📌 説明 このドキュメントは、MikroTik RouterOS の特定のバージョンに存在するサービス拒否（DoS）の脆弱性 について説明しています。 この脆弱性は、巧妙に細工されたSMBリクエストの処理が不十分であること に起因します。リモートの攻撃者は、特別に細工されたリクエストをターゲットサーバーに送信することで、この問題を悪用する可能性があります。 ✅ 悪用に成功した場合 、影響を受けるシステムのクラッシュまたは無応答状態 を引き起こす可能性があります。 🎯 影響を受ける製品 製品| 影響を受けるバージョン...

CVE-2026-89972

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_67469)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667469 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-7112...

CVE-2026-47549

A flaw was found in nvidia-driver. This vulnerability allows an unprivileged local user to cause a Denial of Service DoS by triggering an invalid memory access NULL pointer dereference in the kernel module. A successful exploit results in a system crash...

CVE-2026-97998

A flaw was found in the Linux kernel's netfilter subsystem. A race condition in the nfnetlinklog packet logging component allows a local user to trigger concurrent instance destruction by issuing an unbind request while a queue destruction event is pending. This issue leads to an invalid memory...

CVE-2026-97971

A flaw was found in the Linux kernel's namespace listing subsystem. When an unauthorized caller attempts to list namespaces, the kernel acquires a reference to a candidate namespace before verifying listing permissions. If access is denied, releasing this reference can cause the kernel to sleep...

CVE-2026-97968

A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro hardware monitoring driver. When device registration fails during initialization, debugfs entries are left registered after the associated device data structure has been freed. A local user with access to the debugfs...

AlmaLinux 9.2 [TuxCare] Security Update: 389-ds-base / 389-ds-base-devel / 389-ds-base-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778892584)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778892584 advisory. - A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a serv...

PT-2026-103020

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.49 Description An out-of-bounds write occurs when an attacker-controlled regular expression is used in conjunction with specific JIT API usage. This issue affects the pcre2 jit compile and pcre2 jit match functions,...

CVE-2026-97950

A flaw was found in the Linux kernel's configfs filesystem. A local user could exploit a race condition between creating a symbolic link and deleting its target directory to cause a Denial of Service DoS. When this race condition occurs, the kernel attempts to access a freed directory entry, whic...

CVE-2026-97905

A flaw was found in the Linux kernel's CPU frequency scaling cpufreq subsystem. When creating a frequency policy, the kernel exposes system control files sysfs attributes before the CPU mask memory is zero-initialized. A local user could exploit this race condition by accessing these sysfs...