44633 matches found
CVE-2026-97567
In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect and rtx Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous timer stop operation...
EUVD-2026-86875
In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect and rtx Sashiko noted that the two event can race, leading to inconsistent status. Prevent the race using the synchronous timer stop operation...
CVE-2026-97567
The Linux kernel contains a vulnerability where a race condition can occur between the disconnect() and rtx events within the mptcp component. This race condition can lead to an inconsistent status . The issue is resolved by implementing a synchronous timer stop operation to prevent the concurren...
CVE-2026-97553
In the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when inserting unmount event LOLLM complains that xfshealthmonunmount does an unlocked insert of the unmount event into the health monitor's event list. Fix that...
EUVD-2026-86861
In the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when inserting unmount event LOLLM complains that xfshealthmonunmount does an unlocked insert of the unmount event into the health monitor's event list. Fix that...
CVE-2026-97553
The Linux kernel contains a vulnerability in the xfs filesystem component. Specifically, the function xfs_healthmon_unmount performs an unlocked insert of the unmount event into the health monitor's event list . The fix involves properly locking the healthmon during this insertion to ensure threa...
CVE-2026-97537
The Linux kernel contains a vulnerability in the scsi qla2xxx driver within the qla25xx_free_req_que() and qla25xx_free_rsp_que() functions. Two specific issues occur on the error path of queue creation: first, an unconditional dma_free_coherent() call with a NULL pointer (resulting from a dma_al...
EUVD-2026-86845
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dmafree and bitmap locking qla25xxfreereqque and qla25xxfreerspque have two pre-existing bugs exposed on the error path of qla25xxcreatereq,rspque: 1. When dmaalloccoherent fails during queu...
CVE-2026-97537 scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix queue teardown NULL dmafree and bitmap locking qla25xxfreereqque and qla25xxfreerspque have two pre-existing bugs exposed on the error path of qla25xxcreatereq,rspque: 1. When dmaalloccoherent fails during queu...
CVE-2026-97527 scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock The fcport-unsolctxhead list is modified from several contexts without a common lock. Entries are added in qla2xxxprocesspurlsiocb from the response queue ISR...
EUVD-2026-86835
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock The fcport-unsolctxhead list is modified from several contexts without a common lock. Entries are added in qla2xxxprocesspurlsiocb from the response queue ISR...
CVE-2026-97527
The Linux kernel contains a vulnerability in the scsi: qla2xxx driver where the fcport->unsol_ctx_head list is modified from multiple contexts without a common lock. Specifically, entries are added via qla2xxx_process_purls_iocb() (under the qpair qp_lock) and removed from qla2xxx_process_purl...
EUVD-2026-86831
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...
CVE-2026-97523
The Linux kernel is affected by a race condition within the mptcp component. Specifically, the mptcp scheduler may race with a subflow sockets state change , causing data transmission on a selected socket to fail. This failure can lead to a subsequent release attempting to use mss_now reset to 0 ...
CVE-2026-97523 mptcp: close race between scheduler and state change
In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change The mptcp scheduler may race with subflow sockets state change: data transmission on the selected socket may fail and a later release could try to use mssnow reset to 0 for a...
CVE-2024-6387-poc-1
OpenSSHにおけるCVE-2024-6387 regreSSHion 説明 CVE-2024-6387（通称 "regreSSHion"）は、OpenSSH における重大な脆弱性であり、認証されていないリモート攻撃者が影響を受ける Linux システム上で root 権限でコードを実行することを可能にします。この脆弱性は、glibc ベースのシステムにおける OpenSSH のサーバーコンポーネント sshd のシグナルハンドリングにおける競合状態に起因します。 深刻度 高 CVSS スコア: 8.1 影響 この脆弱性の悪用に成功すると、以下のような結果を引き起こす可能性があります:...
CVE-2023-32233
ビルドと設定 以下の手順は Ubuntu 23.04 Lunar Lobster でテストされています。 ビルド依存関係のインストール 次のコマンドを実行して、ビルド依存関係をインストールします。 root@kitploit: sudo apt install gcc libmnl-dev libnftnl-dev バイナリのビルド 次のコマンドを実行して PoC バイナリをビルドします。 root@kitploit: gcc -Wall -o exploit exploit.c -lmnl -lnftnl プロファイルの更新 組み込みプロファイルには、Ubuntu 23.04 Luna...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...
CVE-2026-79017
A flaw was found in Chromium. A race condition in the Extensions component allows a remote attacker to bypass system access restrictions by using a specially crafted Chrome extension. This could lead to unauthorized access to system resources...