AirDroidPwner

AirDroidPwner CVE-2019-9599 이 익스플로잇은 더 이상 작동하지 않음 Video PoC Exploit: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 AirDroid란 무엇인가? AirDroid 는 특히 브라우저를 통해 컴퓨터를 원격으로 제어하는 데 가장 잘 알려지고 널리 사용되는 도구 중...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

CVE-2024-27686

MikroTik RouterOS 서비스 거부 취약점 📌 설명 이 문서는 MikroTik RouterOS 의 특정 버전에서 발견된 서비스 거부DoS 취약점 에 대해 설명합니다. 이 취약점은 조작된 SMB 요청을 제대로 처리하지 못하는 것 으로 인해 발생합니다. 원격 공격자는 특수하게 조작된 요청을 대상 서버에 전송하여 이 문제를 악용할 수 있습니다. ✅ 성공적인 악용 시 영향을 받는 시스템이 충돌하거나 응답하지 않게 될 수 있습니다. 🎯 영향을 받는 제품 제품| 영향을 받는 버전 ---|--- MikroTik RouterOS|...

CVE-2026-89972

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

CVE-2026-103884

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

EUVD-2026-90972

A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_67469)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667469 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address CVE-2025-7112...

CVE-2026-47549

A flaw was found in nvidia-driver. This vulnerability allows an unprivileged local user to cause a Denial of Service DoS by triggering an invalid memory access NULL pointer dereference in the kernel module. A successful exploit results in a system crash...

CVE-2026-97998

A flaw was found in the Linux kernel's netfilter subsystem. A race condition in the nfnetlinklog packet logging component allows a local user to trigger concurrent instance destruction by issuing an unbind request while a queue destruction event is pending. This issue leads to an invalid memory...

CVE-2026-97971

A flaw was found in the Linux kernel's namespace listing subsystem. When an unauthorized caller attempts to list namespaces, the kernel acquires a reference to a candidate namespace before verifying listing permissions. If access is denied, releasing this reference can cause the kernel to sleep...

CVE-2026-97968

A flaw was found in the Linux kernel's Corsair Commander Pro corsair-cpro hardware monitoring driver. When device registration fails during initialization, debugfs entries are left registered after the associated device data structure has been freed. A local user with access to the debugfs...

AlmaLinux 9.2 [TuxCare] Security Update: 389-ds-base / 389-ds-base-devel / 389-ds-base-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778892584)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778892584 advisory. - A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a serv...

PT-2026-103020

Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.49 Description An out-of-bounds write occurs when an attacker-controlled regular expression is used in conjunction with specific JIT API usage. This issue affects the pcre2 jit compile and pcre2 jit match functions,...

CVE-2026-97950

A flaw was found in the Linux kernel's configfs filesystem. A local user could exploit a race condition between creating a symbolic link and deleting its target directory to cause a Denial of Service DoS. When this race condition occurs, the kernel attempts to access a freed directory entry, whic...

CVE-2026-97905

A flaw was found in the Linux kernel's CPU frequency scaling cpufreq subsystem. When creating a frequency policy, the kernel exposes system control files sysfs attributes before the CPU mask memory is zero-initialized. A local user could exploit this race condition by accessing these sysfs...