token-reverser

Token Reverser Words list generator to crack security tokens. Installation $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g. 582431d4c7b57cb4a3570041ffeb7e10 3. You...

CVE-2025-53367-POC

djvulibremmrexploit This project provides a minimal C++ implementation that triggers a known heap out-of-bounds write vulnerability in DjVuLibre. The code does not weaponize the bug; it only reproduces the faulty execution path so the issue can be inspected and understood. The vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2026-93228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-93228

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

CVE-2026-93228 svcrdma: Reject Write/Reply chunks with segcount 0

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A peer can send a Write or Reply chunk whose segcount field is zero. xdrcheckwritechunk only rejects segcount rcmaxpages, so zero passes the range check, and xdrinlinedecodestrea...

kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. A remote attacker could send a specially crafted sequence of ASCONF Add IP Address Configuration chunks, including DEL-IP Delete IP Address parameters, to trigger a use-after-free condition...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88386: Heap-based Buffer Overflow

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

Linux Distros Unpatched Vulnerability : CVE-2026-88386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the functio...

CVE-2026-88386

The libsndfile library (version 1.2.2 ) is vulnerable to a misaligned memory access issue within the psf_binheader_readf() function. This flaw occurs during the parsing of WAV fmt chunks , where a specially crafted WAV file can cause the function to cast an unaligned destination address to an uns...

CVE-2026-61722

A flaw was found in FluidSynth, a software synthesizer. This vulnerability, an integer overflow, exists in the native DLS Downloadable Sounds parser when it validates articulation chunks. A remote attacker could exploit this by providing a specially crafted DLS file, which causes the parser to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: Handled the chunk tree lookup error in btrfsrelocatesyschunks. The unhandled case in the btrfsrelocatesyschunks loop is a corruption. This can only occur under two impossible conditions: - First, the search key is set t...

CVE-2026-89526 svcrdma: Validate Read chunk positions before reconstruction

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

CVE-2026-89479

CVE-2026-89479 is a use-after-free in the Linux kernel's SCTP implementation. In sctp_endpoint_bh_rcv(), the association is cached in chunk->asoc and chunk->transport without holding a reference. A remote peer can bundle COOKIE ECHO, SHUTDOWN, and SHUTDOWN ACK in a single packet: the COOKIE...

PT-2026-90195

In the Linux kernel, the following vulnerability has been resolved: sctp: stop processing a packet once its association is deleted sctp endpoint bh rcv looks the association up only when chunk-asoc is NULL, and caches the result in chunk-asoc and chunk-transport without taking a reference. A pack...

CVE-2026-88030

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...