Lucene search
+L

424 matches found

Kitploit
Kitploit
added 2026/09/14 4:29 p.m.28 views

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/14 4:29 p.m.13 views

ProcDump-for-Linux

ProcDump ProcDump は、Windows 用の Sysinternals ツールスイートに含まれるクラシックな ProcDump ツールを Linux および Mac 向けに再構築したものです。ProcDump は、パフォーマンストリガーに基づいてアプリケーションのコアダンプを作成する便利な方法を Linux および Mac の開発者に提供します。Linux および Mac 向けの ProcDump は Sysinternals の一部です。 インストールと使い方 要件 最小 Linux OS: Red Hat Enterprise Linux / CentOS 7...

5.9AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/09/14 12:00 a.m.5 views

CVE-2026-89746

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS0.00159EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-89746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses t...

7.8CVSS0.00159EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/09/11 10:15 p.m.8 views

CVE-2026-89746

A flaw was found in the Linux kernel's tracing component. A local user can exploit a use-after-free vulnerability by registering multiple histogram triggers with the same name. This action causes the kernel to attempt to access freed memory, leading to a system crash and a Denial of Service DoS...

7.8CVSS0.00159EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/11 8:20 p.m.7 views

AZL-100169 CVE-2026-89746 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS0.00159EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:20 p.m.5 views

DEBIAN-CVE-2026-89746

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS0.00159EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:20 p.m.7 views

CVE-2026-89746

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS0.00159EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/11 7:46 p.m.31 views

CVE-2026-89746 tracing: Fix use-after-free with same-name named triggers

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS0.00159EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/11 7:46 p.m.13 views

EUVD-2026-76658

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

0.00159EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/11 7:46 p.m.8 views

CVE-2026-89746 tracing: Fix use-after-free with same-name named triggers

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS6.7AI score
SaveExploits0References9
CVE
CVE
added 2026/09/11 7:46 p.m.23 views

CVE-2026-89746

CVE-2026-89746 is a use-after-free in the Linux kernel's tracing subsystem, triggered when two hist triggers on different events share the same name=. The second trigger's hist_data is freed by hist_register_trigger() but its entry in tr->hist_vars is not removed, leaving a dangling pointer. A...

7.8CVSS0.00159EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/09/11 7:46 p.m.10 views

CVE-2026-89746

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

7.8CVSS0.00159EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Fixed an issue where corrupted data was written to the “hist” field, potentially affecting the “namedTriggers” list. The following commands cause a crash: cd /sys/kernel/tracing/events/rcu/rcucallback echo...

7.8CVSS6.3AI score0.00212EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 8:35 p.m.81 views

CVE-2026-66060

CVE-2026-66060 affects Home Assistant, where the Companion app accepts NFC/QR tag links via an OS-level routing mechanism and processes them as if physically scanned without validating the calling app or prompting the user. The root cause is unverified local calls delivering arbitrary tags to Hom...

7.1CVSS5.8AI score0.00163EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 3:54 p.m.17 views

EUVD-2026-52342

OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL privileges to execute arbitrary DDL and DML statements against the application database by uploading a crafted SQL file at the...

8.6CVSS6AI score0.00432EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2026/08/03 2:54 a.m.12 views

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: use-after-free in miSyncDestroyFence()

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence. A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to set up a fence and await that fence, then a second X connection...

7.8CVSS7AI score0.00142EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/02 12:15 p.m.44 views

CVE-2026-67356 ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger

ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity.createUser without permission checks. Attackers with UPDATESCHEMA permission can create triggers that execute JavaScript to create server-wid...

8.8CVSS0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/02 12:15 p.m.52 views

CVE-2026-67356

ArcadeDB prior to 26.7.3 is affected. The issue arises when the real LocalDatabase object is bound into JavaScript trigger contexts with HostAccess.ALL, enabling triggers to call getSecurity().createUser() without permission checks. An attacker with UPDATE_SCHEMA can create such triggers that exe...

8.8CVSS5.6AI score0.00246EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/02 12:15 p.m.11 views

CVE-2026-67356

ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity.createUser without permission checks. Attackers with UPDATESCHEMA permission can create triggers that execute JavaScript to create server-wid...

8.8CVSS5.6AI score0.00246EPSS
SaveExploits0References3
Rows per page
Query Builder