CVE-2026-43494-PinTheft-PoC

SLEY — PoC do PinTheft CVE-2026-43494 Prova de conceito — uid=1000raken → uid=0root após ./sley no WSL2 6.6.87.2-microsoft-standard-WSL2 Prova de conceito em arquivo único para CVE-2026-43494 PinTheft: uma escalada local de privilégios do kernel Linux que combina um bug de contagem de referências...

jitsploitation

jitsploitation Exploit de navegador iOS para CVE-2020-9802, um bug antigo do JIT. Este é um exploit para um bug popular do compilador JIT no motor WebKit para macOS e iOS originalmente documentado pelo Project Zero. Reimplementei o exploit para este bug como um exercício de aprendizado em...

CVE-2026-98271: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the operation...

PT-2026-106600

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb carve pskb carve inside header and pskb carve inside nonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the...

PT-2026-106581

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount bug exists in the RDMA/core component within the iwpm get nlmsg request function. The function initializes the refcount after calling list add tail, which makes the object...

Linux Distros Unpatched Vulnerability : CVE-2026-98252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another...

Linux Distros Unpatched Vulnerability : CVE-2026-98246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Serialize local codec list cleanup hcidevclosesync clears hdev-localcodecs after releasing hdev-lock. Codec list additions and both traversa...

Linux Distros Unpatched Vulnerability : CVE-2026-98271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and...

Linux Distros Unpatched Vulnerability : CVE-2026-98331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via...

CVE-2026-98331: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via ieee80211ifremove, before it unregisters the netdev. However, it's possible...

rust-rpm-sequoia security, bug fix, and enhancement update

1.10.2.1-1 - Rebase to 1.10.2 and sequioa-openpgp with fixes for CVE-2026-42784...

CVE-2026-98252: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another CPU can krefget on nlmsgrequest causing a refcount "addition on 0" bu...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.7-0.1.hum1 aarch64, x8664 grafana13.1-13.1.7-0.1.hum1.src src...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.3-0.1.hum1 aarch64, x8664 grafana13.2-13.2.3-0.1.hum1.src src...

CVE-2020-13942-POC-

CVE-2020-13942 POC + Script de Automação Passos Passo 1 : Enumere todos os subdomínios-alvo para o seu programa de bug bounty favorito Passo 2 : Coloque-os no arquivo targets.txt Passo 3 : Execute o Script Passo 4 : Se você encontrar um alvo vulnerável, não se esqueça de me mencionar :...

pentest-harness

Pentest Harness Heaven for Hackers — o espaço de trabalho profissional para testes de segurança. Um harness de agente de IA open-source, dark-first, para testes de penetração autorizados, pesquisa de bug bounty, laboratórios de segurança e engajamentos de CTF. Construído sobre uma arquitetura de...

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc Executar d8 com a linha de comando: ./d8 2.mjs...

Important: Red Hat Security Advisory: OpenShift Virtualization v4.16 Images

Red Hat OpenShift Virtualization release v4.16 is now available with updates to packages and images that fix several bugs and add enhancements. OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: md: raid1: fixed a potential out-of-bounds error in raid1removedisk. If rddev-raiddisk is greater than mddev-raiddisks, an out-of-bounds error will occur in raid1removedisk. We have already encountered similar reports, as...

Astra Linux – Vulnerability in Qemu

A issue was discovered in QEMU through version 5.1.0. An out-of-bounds memory access was identified in the ATI VGA device implementation. This flaw occurs in the ati2dblt routine in hw/display/ati2d.c, during handling of MMIO write operations via the atimmwrite callback. A malicious guest could...