CVE-2026-89694

A flaw was found in the Linux kernel's NFSv4.2 server nfsd. An authenticated NFSv4.2 client could exploit a vulnerability in the managecpntfstate function by guessing a state identifier. This improper ownership check allows the client to cancel and free another client's copy-notify stateid, leadi...

xz-backdoor-CVE-2024-3094-Check

xz-backdoor-CVE-2024-3094-Check 설치된 xz-utils 버전이 CVE-2024-3094 백도어에 취약한지 확인합니다. 이 스크립트는 Kali Linux 또는 기타 Debian 기반 시스템에서 사용하도록 설계되었습니다. 사용법 root@kitploit: git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd xz-backdoor-CVE-2024-3094-Check chmod +x checkxzutilsCVE-2024-3094.sh...

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

Check-Point_poc

Check-Pointpoc Check-Pointセキュリティゲートウェイ任意ファイル読取り脆弱性CVE-2024-24919 python Check-Pointpoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

Summary A FILE response whose filePath embeds request data e.g. "/srv/public/queryParam 'name'", the documented way to let the client pick a file is confined by getSafeFilePath with resolvedPath.startsWithstaticBaseDir. That prefix test has no path-separator boundary, so a ../-escaped path whose...

CVE-2025-3102

🔐 CVE-2025-3102 – SureTriggers WordPress 플러그인의 인증 우회 🚨 CVE-2025-3102 는 SureTriggers: All-in-One Automation Platform WordPress 플러그인에 영향을 미치는 중요한 인증 우회 취약점입니다. 이 플러그인은 100,000개 이상의 웹사이트 에 활발히 설치되어 있습니다. 결함의 특성과 배포 규모로 인해 이 취약점은 심각한 보안 위험을 초래합니다. 🧠 취약점 요약 CVE ID : CVE-2025-3102 영향받는 플러그인 :...

CVE-2026-45057

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

CVE-2026-47773

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773

ArduinoBLE (the Arduino library providing Bluetooth Low Energy connectivity on certain Arduino models) is vulnerable to memory corruption in versions prior to 2.0.2 . The root cause is a missing bounds check in the ATT layer write request handler, allowing a remote, unauthenticated BLE client to ...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2024-12252

SEO LAT Auto Post = 2.2.1 - 원격 코드 실행 설명 WordPress용 SEO LAT Auto Post 플러그인은 2.2.1 이하 모든 버전의 remoteupdate AJAX 액션에서 capability 검사가 누락되어 파일 덮어쓰기 취약점에 노출됩니다. 이로 인해 인증되지 않은 공격자가 seo-beginner-auto-post.php 파일을 덮어쓸 수 있으며, 이를 악용하여 원격 코드 실행을 달성할 수 있습니다. 취약점 세부 정보 CVE : CVE-2024-12252 CVSS 점수 : 9.8 심각 익스플로...

CVE-2026-89766

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

CVE-2026-89720

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifssbverifysignature bounds the on-disk ubifssignode-len field before handing the signature payload to verifypkcs7signature, but the check has the wrong sign: if...

UBUNTU-CVE-2026-89720

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifssbverifysignature bounds the on-disk ubifssignode-len field before handing the signature payload to verifypkcs7signature, but the check has the wrong sign: if...

AZL-100085 CVE-2026-89720 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifssbverifysignature bounds the on-disk ubifssignode-len field before handing the signature payload to verifypkcs7signature, but the check has the wrong sign: if...

UBUNTU-CVE-2026-89745

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

DEBIAN-CVE-2026-89720

In the Linux kernel, the following vulnerability has been resolved: ubifs: fix out-of-bounds read in signature length check ubifssbverifysignature bounds the on-disk ubifssignode-len field before handing the signature payload to verifypkcs7signature, but the check has the wrong sign: if...

AZL-100175 CVE-2026-89694 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: check client ownership when cancelling a copy-notify stateid On the OFFLOADCANCEL path clp != NULL, managecpntfstate freed the target cpntf state without checking ownership. The lookup key st-siopaque.soid is allocated...

AZL-100163 CVE-2026-89693 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4acltoattr return value in nfsd4create nfsd4create stores the return value of nfsd4acltoattr in status, but the switchcreate-crtype block unconditionally overwrites it in every branch. ACL translation errors are...