gstack

gstack gstack turns Claude Code and other coding agents into a virtual engineering team: a CEO who rethinks the product, an eng manager who locks architecture, a designer who catches AI slop, a reviewer who finds production bugs, a QA lead who opens a real browser, a security officer who runs OWA...

yLog4j

yLog4j This is Y-Sec's @PortSwigger Burp Plugin for the Log4j CVE-2021-44228 vulnerability. The focus of yLog4j is to support mass-scanning of the Log4j vulnerability CVE-2021-44228. Please see our Blog post for details and backgrounds. Requirements PortSwigger Burp Professional Jython 2.x It is...

CVE-2026-82961

The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...

PT-2026-128334

The GPIO syscall handlers in drivers/gpio/gpio handlers.c did not validate the pin argument supplied by a user-mode caller. z vrfy gpio pin configure, z vrfy gpio pin get config and z vrfy gpio pin interrupt configure verified only the device object K SYSCALL DRIVER GPIO / K SYSCALL OBJ and then...

UBUNTU-CVE-2026-98475

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...

PT-2026-116694

In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schib config and schib fields as dma64 t to enable automatic detection of incorrect assignments. Also...

PT-2026-117023

In the Linux kernel, the following vulnerability has been resolved: net: page pool: fix use-after-free in page pool recycle ring bulk With CONFIG PAGE POOL STATS=y, page pool recycle ring bulk updates the recycle stats after dropping the producer lock. If it just recycled the last inflight netmem...

ROOT-OS-UBUNTU-2404-CVE-2025-38334 CVE-2025-38334 in linux - Patched by Root

Root has patched CVE-2025-38334 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

Exploit for Server-Side Request Forgery in Apache Ofbiz

Apache OFBiz Authentication Bypass to RCE CVE-2023-51467 V...

Linux Distros Unpatched Vulnerability : CVE-2026-15390

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP...

AZL-105729 CVE-2026-15390 affecting package qemu 10.1.0-1

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

DEBIAN-CVE-2026-15390

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

CVE-2026-15390

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

UBUNTU-CVE-2026-15390

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

EUVD-2026-88699

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

CVE-2026-15390 Out-of-bounds write in Das U-Boot

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

CVE-2026-15390

Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

PT-2026-102493

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.07 Description When configured with the CONFIG IP DEFRAG=y parameter, the software fails to clear the IP reassembly state after delivering a complete datagram. This allows an attacker capable of delivering...

PT-2026-109081

Das U-Boot with CONFIG IP DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...

Linux Distros Unpatched Vulnerability : CVE-2026-97959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsroute: free emptied bucket on filter move route4change can move an existing filter to a different top-level bucket: route4setparms recomputes the...