kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

kernel: netfilter: conntrack_irc: fix possible out-of-bounds read

A flaw was found in the Linux kernel's netfilter conntrackirc module. This vulnerability allows for a possible out-of-bounds read. When parsing network traffic, if a command string is matched but subsequent parsing fails, the system does not properly exit, leading to the flaw. This could...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

CVE-2024-3273

D-Link NAS कमांड निष्पादन शोषण यह Python स्क्रिप्ट D-Link NAS उपकरणों में एक कमजोरी CVE-2024-3273 का शोषण करती है, जो मनमाने कमांड निष्पादन की अनुमति देती है। यह कमजोरी का लाभ उठाकर प्रभावित उपकरणों पर दूरस्थ रूप से कमांड निष्पादित करती है। विशेषताएँ D-Link NAS उपकरणों पर मनमाने कमांड निष्पादित...

CVE-2023-36123

CVE-2023-36123 केवल प्रदर्शन उद्देश्यों के लिए। यह शोषण Plain Craft Launcher 2 के सभी संस्करणों पर काम करता है। Custom.xaml डाउनलोड करें और Plain Craft Launcher 2 में आयात करें, फिर "Run Command" पर क्लिक करें। https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb1237...

anubis

Anubis root@kitploit: d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis is...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

EUVD-2026-66248

mpSetEnddisc copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp8 command interface. A local user with access to the ppp8 command interface can crash ppp8 or potentially execute arbitrary code as root...

CVE-2026-58097

FreeBSD ppp(8) contains a buffer overflow in mp_SetEnddisc() , which copies a user-supplied PSN endpoint discriminator value without length validation. A local user in the "network" group (required to run the setuid-root ppp(8)) can exploit this via the command interface to crash ppp(8) or potent...

CVE-2026-9805

SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data without checking buffer size and could cause buffer overflow...

CVE-2026-80214

LibreNMS’s Virtualization Discovery module is vulnerable to command line injection. An authenticated admin user can execute arbitrary code on the host server...

CVE-2026-57171

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the catalog-generate, profile-generate, and ssp-generate author commands write generated Markdown to an attacker-influenced output...

CVE-2026-57170

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions prior to 3.12.4 and 4.0.0 through 4.0.3, the custom Jinja2 include tags mdsectioninclude and mdcleaninclude re-parse the content of an included Markdown file as Jinja2 template co...

Malicious code in rce-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14523 Malicious code in rce-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c27b8e593dc0298e09bb4a5fd6acc68dc03bf324bdc7267e87482fdd10b0fa2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

linux-privesc-lab

linux-privesc-lab Linux Privilege Escalation Vulnerability...

Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2026-14522 Malicious code in syntaxerror-package-12345 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ede434cf61641064a49939821778e511c3fcf8afab7e443582b8b103e13171d9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...