CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

APIHarvester

ApiHarvester A full-pipeline black-box API security scanner written in Python. It enumerates endpoints, identifies parameters, probes HTTP methods, tests authentication/authorization logic, and runs standard OWASP API Top 10 attack simulations BOLA, Broken Auth, BFLA, Mass Assignment, Rate...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1742469561)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1742469561 advisory. - In the Linux kernel, the following vulnerability has been resolved: tun: avoid double free in tunfreenetdev Avoid double free in...

PT-2026-116539

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQLDB::noresults/MySQLDB::getExams/MySQLDB::latestExamID/MySQLDB::getreport of the file...

PT-2026-117119

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is...

PT-2026-117044

In the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm clk get error pointer in probe devm clk get&pdev-dev, "rtcref"'s return value was passed straight into clk get rate without checking it for an error first, unlike the "rtc" clock a few lines above...

PT-2026-116662

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the xlog recover iunlink bucket function within the XFS file system of the Linux kernel. The flaw involves improper cursor and pointer handling during the recovery of...

PT-2026-117078

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mt remove quiesces the sticky-finger timer before stopping the hardware: timer delete sync&td-release timer; sysfs remove group&hdev-dev.kobj, &mt attribute...

PT-2026-116865

In the Linux kernel, the following vulnerability has been resolved: tcp: Skip cond resched in inet csk listen stop under BPF context bpf sock destroy runs from the tcp iterator, under rcu read lock. If the sock is a listener that still has children in its accept queue, tcp abort ends up in inet c...

PT-2026-116928

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: count only matching reservations in reserved switch ieee80211 vif use reserved switch validates a replacement by counting assigned links on ctx-replace ctx and treating reservations too broadly. A link can still b...

PT-2026-116671

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open cached dir sends CREATE and QUERY INFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common...

PT-2026-116983

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: Fix NULL pointer dereference in FUNCTIONFS ENDPOINT DESC When user space sets up FunctionFS with only full-speed descriptors e.g., flags = FUNCTIONFS HAS FS DESC and the gadget operates at a higher speed such a...

PT-2026-116738

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu debugfs test ib show amdgpu debugfs test ib show resumes the device with pm runtime get sync before taking the reset domain semaphore with down write killable. If the write lock acquisiti...

PT-2026-116657

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mptcp module where the mptcp write data fin function fails to initialize certain values when sending a DATA FIN without data. Because a DATA FIN occupies one octet...

Linux Distros Unpatched Vulnerability : CVE-2026-98764

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: Fix NULL pointer dereference in FUNCTIONFSENDPOINTDESC When user space sets up FunctionFS with only full-speed descriptors e.g., flags =...

Linux Distros Unpatched Vulnerability : CVE-2026-98452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: clean up failed cached directory opens opencacheddir sends CREATE and QUERYINFO as a compound request. If the CREATE succeeds but a later command...

Linux Distros Unpatched Vulnerability : CVE-2026-98756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: cdns3: Fix NULL pointer dereference in cdns3pciprobe The Cadence USBSS controller is a two-function PCI device. The first probed function allocates the...

Linux Distros Unpatched Vulnerability : CVE-2026-98825

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: mpfs: fix unchecked devmclkget error pointer in probe devmclkget&pdev-dev, rtcref's return value was passed straight into clkgetrate without checking it f...

Linux Distros Unpatched Vulnerability : CVE-2026-98859

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky- finger timer before stopping the hardware:...

PT-2026-117039

In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQF USE SCHED when the operation is known The cached requests are allocated for one operation but can be handed out for another. A passthrough command has RQF USE SCHED cleared, so using those flags for a subsequent...