535 matches found
skitter-creek-bath-salts
skitter-creek-bath-salts Desbloqueandotodo en la CPU con el scrambling de DRAM — PSP, C6, microcódigo, SMM, y cualquier otra cosa que las especificaciones omitieron. &x == &x. Normalmente. Manipula el controlador de DRAM y una dirección puede terminar donde quieras en la memoria...
page_table_walk
Captura la Bandera en Memoria Física Has leído sobre paginación. Los diagramas tienen sentido. Cuatro niveles, 9 bits cada uno, marco de página, desplazamiento. Claro. Pero luego te encuentras con un desafío que requiere caminar realmente las tablas de páginas, y te das cuenta de que no lo sabes...
cormem-read-poc
DESCARGO DE RESPONSABILIDAD : Este proyecto es solo para fines educativos y de investigación en seguridad. Úselo únicamente en sistemas que posea o para los que tenga permiso explícito para realizar pruebas. El uso no autorizado puede ser ilegal en su jurisdicción. cordrvexploit — CVE-2026-38194...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Fixed the refcount leak in the address translation for armsmmudevice. The reference counting issue occurs in several exception handling paths of armsmmuiovatophyshard. When these error scenarios occur, the functio...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: nilfs2: Fixed a failure to detect corruption of DAT files in BTree and direct mappings. The patch series is titled “nilfs2: Fix kernel bug at submitbhwbc”. This resolves a kernel bug reported by syzbot. Since there are two...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when the PCIe device is accessible in scalable mode. The commit 4fc82cd907ac “iommu/vt-d: Do not issue ATS invalidation requests when the device is disconnected” relies on pcidevisdisconnected to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fixed the check for NULL values in the SCCB field. The tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after the...
CVE-2026-68470: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame layout before RX Extension frames only have the extension header at the regular 802.11 header offset. The generic RX path can still reach helpers and interface dispatch code that read...
CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability
...
CVE-2026-56179: Origin Validation Error
Origin validation error in Windows Network Address Translation NAT allows an unauthorized attacker to perform spoofing over an adjacent network...
CVE-2026-72761
The CVE affects the webhook URL validator in website/notifications/webhooks.py, which uses ip.is_global after DNS resolution. IPv6 transition addresses (NAT64 64:ff9b::/96, 6to4 2002::/16, Teredo 2001:0000::/32) are categorized as globally routable by IANA, causing is_global to return True even w...
PYSEC-2026-3645 Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, URL-to-markdown conversion and web-search content retrieval, and decides whether a destination is allowed by asking whether its IP address is globally routable. That test operates on the literal IPv6 address and do...
penetration-testing-windows10
Vulnerability Analysis and Penetration Testing Using Metasploi...
SUSE CVE-2026-53520
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From version 2.0.14 to before version 2.1.0, authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing. This issue has been patched in version 2.1.0...
CVE-2026-54272
The CVE affects the ip-address JavaScript library (versions 10.1.1–10.2.0). A misclassification of IPv4-mapped/NAT64 IPv6 addresses in Address6.getType() caused SSRF and trust-boundary issues by not normalizing mapped addresses to IPv4 before checks, due to the IPv6 special-use prefix table missi...
CVE-2026-63913
The CVE-2026-63913 entry concerns the Linux kernel netfilter conntrack TCP state machine. A crafted RST with an invalid SEQ after observing a SYN could transition the conntrack entry to TCP_CONNTRACK_CLOSE, even if the RST is not a valid response to the observed SYN or its direction. This could p...
CVE-2026-63913
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an...
CVE-2026-53374 drm/amdgpu: zero-initialize GART table on allocation
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpubocreatekernel does not zero-initialize the buffer, when a single PTE is written the TLB may speculativel...
PT-2026-61230
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state via an RST packet with an invalid sequence number. After a SYN packet is...
