AZL-106866 CVE-2026-42617 affecting package ntfs-3g 2022.10.3-5

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

CVE-2026-42618

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...

CVE-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

DEBIAN-CVE-2026-42616

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

DEBIAN-CVE-2026-42617

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...

bpfjailer

BpfJailer Linux용 eBPF 기반 강제 접근 제어Mandatory Access Control. 이 프로젝트는 클로즈드 소스 BpfJailer의 완전한 재작성 버전이며 완전히 실험적입니다. 내부 BpfJailer가 작성되었을 당시에는 사용할 수 없었던 bpf arena와 같은 최신 기능을 활용합니다. 문제가 발생할 것으로 예상되며 버그 바운티 대상이 아니고 보안 취약점으로 간주되지도 않습니다. 적절히 평가된 후에는 내부 클로즈드 소스 버전을 대체할 것입니다. BpfJailer는 eBPF LSM 프로그램을 사용하여...

HimitsuShell

README: English | 中文 | 日本語 | 한국어 HimitsuShell 커널을 감시해도 볼 수 없는 쉘 스크립트. 쉘 스크립트를 내장 인터프리터, LLVM 기반 난독화, 디버깅 방지 기능을 갖춘 단일 정적 바이너리로 변환합니다 shc 대안. Block Flow Graph Ghidra 사용법 1. download docker image x8664linuxmusl curl -LO...

Koi

koi 🎏 &color=rgb\255%2C%20116%2C%200\ This project is my shot at making a fast, easy to use yet feature rich shell handler with a pretty interface. Disclaimer: please note that this is still under development, and I am still working on some of the key features, talked about in this section. 📑 Tab...

Exploit for CVE-2026-13043

🕷️ CVE-2026-13043 - Panda / WatchGuard Kernel Memory Access...

ghostlock-sabrina

GhostLock Sabrina Root exploit for Chromecast with Google TV sabrina via CVE-2026-43499 -- a use-after-free in the Linux kernel's futex PI priority inheritance subsystem. Achieves root on a locked bootloader device running Android 14 with kernel 5.15.170 PGO+BOLT+LTO, clang 17. The vulnerability...

GateX

GateX "Fortinet Hunter 2026" Nuitka 비밀번호 게이트를 재키잉re-key 하는 TUI. @YoSoth0의 캡처 더 플래그capture-the-flag 챌린지의 일부. Write-up: Hunting the Fortinet Hunter 0-day ELF는 호스트에서 절대 실행되지 않는다. GateX는 onefile 페이로드를 정적으로 언팩하고, 뒤섞인 Argon2id 해시와 AES-GCM 배너를 XOR 언마스킹한 뒤, FHPASS=gatex가 두 검사를 모두 통과하도록 해당 블롭을 재작성하고, 잠긴...

CVE-2019-11707-from-an-IonMonkey-type-confusion-to-SYSTEM-

CVE-2019-11707 WINDOWS EXPLOIT POC 完全なリサーチはこちら: https://blog.grunt.ar/bin-exploitation/binary-gecko-academy/cve-2019-11707-firefox-ionmonkey-to-system-en/ 動画POC https://youtu.be/5Q5SkR7qslg...

CPENT-iLabs

🛡️ CPENT v2 iLabs — Practical Penetration Testing Vault !Ce...

Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis

1. x32dbg – 암호화된 구성 복호화 및 메모리 할당 x32dbg 메모리 덤프는 Formbook이 구성 데이터를 복호화하고 NtAllocateVirtualMemory를 사용하여 해당 데이터를 위한 메모리를 할당한다는 것을 보여줍니다. 주요 관찰 사항: NtAllocateVirtualMemory – 복호화된 페이로드를 위한 메모리를 할당합니다. mov edx, dword ptr ds:esi+1C – ESI 레지스터에서 암호화된 데이터의 크기를 가져옵니다. push 0x1000 – MEMCOMMIT을 사용하여 메모리를...

Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were found in openSSL used by IBM OS Image for Red Hat Enterprise Linux Systems shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-34181 DESCRIPTION: Issue Summary: The...

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

The Computer Emergency Response Team of Ukraine CERT-UA has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer aka Psychedelic Stealer. The activity, which was observed by the agency in...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Описание CVE-2023-36845 представляет собой заметную уязвимость манипуляции переменными окружения PHP, которая затрагивает межсетевые экраны Juniper SRX и коммутаторы EX. Хотя Juniper классифицировал эту уязвимость как среднюю по серьезности, в данной статье мы объясним, как эту...

Nuclei_Templates

🎯 Nuclei Templates A large personal collection of 50,000+...

cve-2017-12149-playground

Многие критически важные отрасли банковское дело, здравоохранение, производство полагаются на устаревшее связующее ПО, которое было создано специально для работы на JBoss 5 или 6. Поскольку такие приложения часто слишком хрупки для миграции на современные версии WildFly преемника JBoss, организац...