CVE-2026-80661

CVE-2026-80661 is a use-after-free vulnerability in the Linux kernel's UFS trace events (drivers/ufs/core/ufs_trace.h). The tracepoints passed a pointer to the hba structure to TP_printk(), which dereferenced it to print the device name. Because TP_printk() executes only when the trace event is r...

EUVD-2026-67537

In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structure as an argument for the tracepoint and then in TPprintk the printing...

CVE-2026-80645 rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()

In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't find the item we are looking for in the list, then the loop exits with the iterator, which is "dbell" in this loop, pointing to invalid...

CVE-2026-80645

CVE-2026-80645 affects the Linux kernel 's rapidio/tsi721 driver, specifically the tsi721_db_dpc() function. The root cause is a bad dereference : a list_for_each() loop leaves the iterator dbell pointing to invalid memory when the searched doorbell is not found in the list. Additionally, the fou...

EUVD-2026-67521

In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721dbdpc With a listforeach loop, if we don't find the item we are looking for in the list, then the loop exits with the iterator, which is "dbell" in this loop, pointing to invalid...

CVE-2026-80624

CVE-2026-80624 affects the Linux kernel 's mfd: cs42l43 driver. The root cause is a missing sanity check: the code verifies that a firmware was received but does not confirm that the firmware size exceeds the firmware header size. Because the firmware pointer is dereferenced as a pointer to the h...

CVE-2026-80624 mfd: cs42l43: Sanity check firmware size

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a...

EUVD-2026-67500

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a...

CVE-2026-80615

CVE-2026-80615 is a false-positive memcpy overflow in the Linux kernel's net: dst_metadata subsystem, specifically in tun_dst_unclone. The issue occurs because kmalloc_flex() in metadata_dst_alloc() sets __counted_by to options_len (initialized to zero), causing the compiler to flag a potential b...

CVE-2026-80615 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

EUVD-2026-67491

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2019-5782_CVE-2019-13768

https://googleprojectzero.blogspot.com/2019/04/virtually-unlimited-memory-escaping.html Sfrutta CVE-2019-7582 e CVE-2019-13768/P0 issue 1755 Ha come target Chrome 71.0.3578.98 Necessario aggiornare il PoC originale per funzionare su Windows 10 1909+. Inoltre necessario per aumentare l'affidabilit...

Nuclei-Template-CVE-2024-1561

Template Nuclei per CVE-2024-1561 Questo template Nuclei è progettato per rilevare la vulnerabilità Gradio CVE-2024-1561 nelle applicazioni web. Gradio è una libreria Python per creare componenti UI personalizzabili attorno ai modelli di machine learning. Questa vulnerabilità può consentire agli...

CVE-2023-3460_POC

CVE-2023-3460 Exploit per CVE-2023-3460 - Accesso admin non autorizzato per il plugin Ultimate Member. Realizzato con Golang root@kitploit: ╔══════════════════════════════════════════════════╗ ╔══════════════════════════════════════════════════╗ ║ DISCLAIMER ║ ║ ABOUT THE PROJECT ║ ║ ║ ║ ║ ║ This...

CVE-2022-40471

CVE-2022-40471 – RCE CPMS tramite Upload File Autenticato 📌 Panoramica CVE-2022-40471 è una vulnerabilità di Remote Code Execution autenticata che colpisce Clinic's Patient Management System CPMS. La vulnerabilità è dovuta a una validazione insufficiente dei file caricati nella funzionalità di...

CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution

CVE-2026-3844 – Plugin WordPress Breeze Cache RCE non autenticata -red?style=flat-square CVE-2026-3844 è una vulnerabilità critica di caricamento arbitrario di file non autenticata nel plugin WordPress Breeze Cache versioni ≤ 2.4.4. Un attaccante può pubblicare un commento contenente un tag...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 è una vulnerabilità critica di esecuzione remota di codice in Microsoft Outlook versioni incluse Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 precedenti alla patch di febbraio 2024. Consente a un attaccante non autenticato di aggirare la Visualizzazione protetta di Outlo...

remic

remic Scanner di vulnerabilità per rilevare vulnerabilità divulgate pubblicamente nelle dipendenze delle applicazioni Utilizzo root@kitploit: $ remic -h NAME: remic - A simple and fast tool for detecting vulnerabilities in application dependencies USAGE: remic options file VERSION: 0.0.2 OPTIONS:...

CVE-2026-25194

CVE-2026-35194 — Apache Flink SQL Code Injection Remote-Code-Ausführung auf Apache Flink TaskManagern durch SQL-Code-Generierungs-Injection...

gatekeeper v3.23.1

Gatekeeper How is Gatekeeper different from OPA? Compared to using OPA with its sidecar kube-mgmt aka Gatekeeper v1.0, Gatekeeper introduces the following functionality: An extensible, parameterized policy library Native Kubernetes CRDs for instantiating the policy library aka "constraints" Nativ...