484 matches found
python-paddingoracle
python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: jfs: jfsdmap: Validates dbl2nbperpage during mounting In jfsdmap.c, on line 381, BLKTODMAP is used to obtain a logical block number within dbFree. dbl2nbperpage, which represents the log2 of the number of blocks per page, is pass...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mm, thp: Bail out early for writeback pages in collapsefile Currently, collapsefile does not explicitly check PGwriteback. Instead, pagehasprivate and trytoreleasepage are used to filter writeback pages. This approach does not wo...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: nilfs2: A shift-out-of-bounds condition has been fixed due to an overly large exponent of the block size. If the slogblocksize field in the superblock data is corrupted and too large, initnilfs and loadnilfs may still trigger a...
Astra Linux – Vulnerability in Qemu
In QEMU versions up to 8.0.0, a division by zero can occur in the scsidiskreset function in hw/scsi/scsi-disk.c. This occurs because scsidiskemulatemodeselect does not prevent the s-qdev blocksize from being 256. This causes QEMU and the guest to stop functioning immediately...
CVE-2026-104424 Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...
CVE-2026-104424 Zebra before 6.1.0 Incorrect Block Size Calculation in getblocktemplate
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks,...
Rocky Linux 8 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / etc (crlsa-2025_2722)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20252722 advisory. Kerberos is a network authentication system, which can improve the security of your network by eliminating the insecure practice of sending passwords over the netwo...
Rocky Linux 9 [CIQ] Security Update: krb5-devel / krb5-libs / krb5-libs-debuginfo / krb5-pkinit / etc (crlsa-2025_7067)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257067 advisory. krb5: overflow when calculating ulog block size CVE-2025-24528 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...
CVE-2026-97488
A flaw was found in the Linux kernel. The QNX4 filesystem driver fails to properly handle errors when setting the block size during mount operations. A local attacker could exploit this vulnerability by mounting a crafted filesystem image with an invalid block size, triggering a kernel crash that...
CVE-2026-97486
A flaw was found in the Linux kernel's HPFS High Performance File System implementation. The driver does not verify whether setting the filesystem block size succeeds during a mount operation. A local user with the ability to mount storage devices could exploit this vulnerability by mounting a...
CVE-2026-97485
A flaw was found in the Linux kernel's Optimized MPEG File System OMFS driver. The driver does not properly handle failures when configuring block sizes during file system mounting. A local attacker with the ability to mount a crafted file system image could exploit this flaw to trigger a kernel...
SUSE CVE-2026-97487
In the Linux kernel, the following vulnerability has been resolved: jfs: handle setblocksize failures jfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...
CVE-2026-97488
In the Linux kernel, the following vulnerability has been resolved: qnx4: handle setblocksize failures qnx4 uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...
AZL-103613 CVE-2026-97488 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: qnx4: handle setblocksize failures qnx4 uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...
DEBIAN-CVE-2026-97486
In the Linux kernel, the following vulnerability has been resolved: hpfs: handle setblocksize failures hpfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...
UBUNTU-CVE-2026-97488
In the Linux kernel, the following vulnerability has been resolved: qnx4: handle setblocksize failures qnx4 uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...
EUVD-2026-86084
In the Linux kernel, the following vulnerability has been resolved: hpfs: handle setblocksize failures hpfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...
PT-2026-104958
In the Linux kernel, the following vulnerability has been resolved: hpfs: handle set blocksize failures hpfs uses buffer heads, which don't handle block size PAGE SIZE well. Without this, mounting will hit the BUG ONoffset = folio sizefolio; in folio set bh on the first bread gfp call...
CVE-2026-97485
In the Linux kernel, the following vulnerability has been resolved: omfs: handle setblocksize failures omfs uses bufferheads, which don't handle block size PAGESIZE well. Without this, mounting we will hit the BUGONoffset = foliosizefolio; in foliosetbh on the first breadgfp call...