fusee-gelee

fusee-gelee An implementation of the Fusee Gelee exploit CVE-2018-6242 for the Nintendo Switch, based on the vulnerability disclosed by Kate Temkin / ReSwitched in March 2018. Launches an arbitrary payload e.g. hekate on a Tegra X1 device in USB Recovery Mode RCM, bypassing the boot ROM's signatu...

Abyss Web Server first-run console takeover log-as-CGI RCE

First-run console credential creation, bind access log as /bin/sh CGI, smuggle command via User-Agent, trigger via log URI fetch. """Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306,...

Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect

Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...

Aprelium Abyss Web Server X1 2.16.22.0 First-Run Console Takeover

Aprelium Abyss Web Server X1 version 2.16.22.0 permits an unauthenticated client during the first-run configuration state to create a console administrator credential, configure a log file as a CGI shell script, and execute commands as the server process. https://packetstorm.news/download/235391...

K000163625: Arm CPU vulnerability CVE-2025-10263

Security Advisory Description Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned b...

SUSE CVE-2026-64100

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

Linux Distros Unpatched Vulnerability : CVE-2026-64100

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressur...

CVE-2026-64100

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

CVE-2026-64100 drm/msm: Fix shrinker deadlock

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

EUVD-2026-45785

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

CVE-2026-64100 drm/msm: Fix shrinker deadlock

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

CVE-2026-64100

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

CVE-2026-64100: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVELOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ 43...

PT-2026-61417

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0 Description A circular locking dependency exists in the drm/msm component of the Linux kernel. When VM reclaim pressure occurs, the kswapd0 process holding the fs reclaim lock calls the MSM shrinker, which subsequent...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: AppArmor: Fixed a string overflow due to missing termination. When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm Snapdragon X1 system, a string buffer overflow was observed: BUG: KASAN: Out-of-bounds access in...

CVE-2026-46055

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix string overrun due to missing termination When booting Ubuntu 26.04 with Linux 7.0-rc4 on an ARM64 Qualcomm Snapdragon X1 we see a string buffer overrun: BUG: KASAN: slab-out-of-bounds in aadfamatch...

PT-2026-43922

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1 Description A string buffer overrun occurs in the AppArmor module due to missing termination. This issue manifests as a slab-out-of-bounds read within the aa dfa match function, specifically when...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: ucsiacpi: The command completion timeout has been increased. The commit 130a96d698d7 “usb: typec: ucsi: acpi: Increase command completion timeout value” increased the timeout from 5 seconds to 60 seconds due to issues relate...

Exploit for Cross-Site Request Forgery (CSRF) in Ilevia Eve_X1_Server_Firmware

No d...

Blue Access Cobalt X1 security vulnerabilities

Blue Access Cobalt X1 is an access control and access management system software from Blue Access USA. A security vulnerability exists in Blue Access Cobalt X1 that stems from an authentication bypass that could allow an attacker to manipulate web application functionality without legitimate...