PT-2026-90129

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod set value cansleep for reset GPIO rtl83xx reset assert and rtl83xx reset deassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a...

PT-2026-90334

In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-children and ei-list in init ei eventfs create dir allocates the eventfs inode and initializes it with init ei. But this does not initialize the eventfs inode list heads. If the eventfs create dir fails due...

CVE-2026-33936

CVE-2026-33936 ecdsaPyPI의 서비스 거부Denial of Service 취약점 소개 저는 널리 사용되는 Python 암호화 라이브러리인 python-ecdsa 에서 중간Moderate 심각도 취약점을 식별하고 책임 있는 공개responsible disclosure를 수행했습니다. 이 라이브러리는 지난 한 달간 4,780만 회 다운로드되었습니다. 저는 아주 구체적인 질문을 염두에 두고 python-ecdsa 를 검토하던 중 이 문제를 발견했습니다: 잘못된 형식의 DER이 길이를 속이고 파서가 이를 지나치게 신뢰...

CVE-2026-80919 drm/amdgpu: fix recursive ww_mutex acquire in amdgpu_devcoredump_format

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive wwmutex acquire in amdgpudevcoredumpformat When dumping IB contents from a hung job, amdgpudevcoredumpformat acquired the VM root PD's reservation via amdgpuvmlockbypasid and then, for each IB, called...

CVE-2005-0603-phpBB-2.0.12-Full-path-disclosure

CVE: https://vulners.com/cve/CVE-2005-0603 Neo Security Team NST® - 권고 06 - 25/02/05 프로그램: phpBB 2.0.12 홈페이지: http://www.phpbb.com 취약한 버전: phpBB 2.0.12 및 하위 버전 위험도: 낮음!! 영향: 전체 경로 공개 root@kitploit: -==phpBB 2.0.12 전체 경로 공개==- 설명 phpBB는 강력하고, 완전히 확장 가능하며, 고도로 사용자 정의가 가능한 오픈 소스 게시판 패키지입니다. phpBB는 사...

CVE-2026-86840

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:20+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86840 2026-09-10 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6pru4pes2r...

CVE-2026-86737

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86737...

CVE-2026-86733

creationtimestamp| type| source ---|---|--- 2026-09-08 17:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2klradhbvva6i 2026-09-08 20:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86733 2026-09-11 05:00:06+00:00| seen|...

CVE-2026-86738

creationtimestamp| type| source ---|---|--- 2026-09-08 17:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzirohpay2s 2026-09-08 17:58:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5cxtp2tqqrxtz 2026-09-08 18:08:22+00:00| seen|...

CVE-2025-0994

CVE-2025-0994 この検出方法はどのように機能しますか？ このNucleiテンプレートは、HTMLボディに格納されているバージョンを抽出し、そのバージョンに基づいて、インスタンスがCVE-2025-0994に対して脆弱かどうかを判断します。 パッチ適用済みバージョン: 15.8.9 このスクリプトを実行するには？ 1. Nucleiをここからダウンロードします 2. テンプレートをローカルシステムにコピーします 3. 次のコマンドを実行します: nuclei -u https://yourHost.com -t template.yaml 参考文献...

CVE-2026-86267

creationtimestamp| type| source ---|---|--- 2026-09-07 08:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86267...

CVE-2026-86268

creationtimestamp| type| source ---|---|--- 2026-09-07 05:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2zui7f45fntkc 2026-09-07 08:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86268...

CVE-2026-86315

creationtimestamp| type| source ---|---|--- 2026-09-07 05:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/g4og66twpugy6 2026-09-07 08:15:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86315...

enhanced-iframe-protection

Enhanced iFrame Protection - ブラウザ拡張機能 Enhanced iFrame Protection EIP は、埋め込まれた iframe 要素を自動的に検出し、詳細な警告を表示する軽量な拡張機能です。Browser-In-The-Browser BITB 攻撃から保護することを目的としています。 スクリーンショット 上記のスクリーンショットでは、フィッシングサイトが実際のブラウザウィンドウのように見えるようにスタイル設定された div 内に iframe 要素を埋め込んでいます（accounts.google.com からのものであると偽った偽の URL...

nextjs-react2shell-detect

Расширение Chrome, которое запускает next.version локально и выводит предупреждающий поповер, если сайт использует версию Next, уязвимую для react2shell Это проект Plasmo extension, созданный с помощью plasmo init. Начало работы Сначала запустите сервер разработки: root@kitploit: bun dev Откройте...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053280)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053280 advisory. In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decodegetfattrattrs Fix the following KMSAN warning: CPU: 1 UID: 0 PID:...

SUSE CVE-2026-80788

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...

AZL-99503 CVE-2026-80788 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...

CVE-2026-80788

CVE-2026-80788 affects the Linux kernel NVMe-over-TCP target subsystem (nvmet-tcp ). A remote NVMe initiator can send a command with an oversized SGL (Scatter Gather List) field, causing nvmet_tcp_map_data() to allocate over one million scatterlist/iovec entries. This exceeds MAX_PAGE_ORDER , tri...

CVE-2026-80788 nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because the length passed into the allocator is controlled by the remote...