45571 matches found
kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...
kernel: Linux kernel Bluetooth RFCOMM: Denial of Service via use-after-free in set_termios
A flaw was found in the Linux kernel's Bluetooth RFCOMM subsystem. A race condition in the rfcommttysettermios function allows a session to be freed while it is still actively in use. This use-after-free UAF vulnerability can be exploited by a local attacker. Successful exploitation leads to a...
CVE-2026-82406
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...
EUVD-2026-85573
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...
kernel: drm/amdgpu: Fix use-after-free race in VM acquire
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. This vulnerability involves a timing issue, known as a race condition, during the process of acquiring a Virtual Machine VM. When multiple processes attempt to access the same VM simultaneously, a local attacker could exploit this flaw...
CVE-2024-6387-POC
OpenSSH CVE-2024-6387 脆弱性の悪用 🚀 OpenSSH CVE-2024-6387 のリモートコード実行 RCE 脆弱性を悪用するために設計された Python スクリプト。この脆弱性はハンドラの競合状態に関連し、任意のコード実行につながる可能性があり、攻撃者が root アクセスを取得することを可能にします。これは概念実証であり、教育目的のみを対象としています。 概要 📖 OpenSSH の CVE-2024-6387 は深刻な脆弱性です。これは、root 権限で任意のコードを実行するために悪用される可能性のあるハンドラの競合状態に関連しています。 特徴 🌟...
CVE-2025-32463_sudo_chroot
CVE-2025-32463 - sudo chroot 使用方法 Dockerfile は、脆弱性のあるバージョンの sudo（1.9.16p2）がインストールされた、安全で分離されたテスト環境を作成します。これにより、ホストシステムに影響を与えることなくエクスプロイトをテストできます。 root@kitploit: Build the vulnerable test environment docker build -t cve . Run the container creates an unprivileged user 'testuser' docker run -it cve...
CVE-2026-86247
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...
CVE-2026-86247
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...
CVE-2026-86247
A race condition within a thread in Apache Tomcat Native allows client certificate verification requirements to be down-graded for certain configurations. This vulnerability affects versions 2.0.0 through 2.0.15 and 1.3.0 through 1.3.8 , with unsupported versions potentially impacted. To remediat...
CVE-2026-86247 Apache Tomcat Native: Client certificate requirements can be down-graded
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...
EUVD-2026-85270
Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be...
Fixed in Apache Tomcat Native Connector 2.0.16 / 1.3.9
Important: Client certificate requirements can be down-graded CVE-2026-86247 A race condition allowed client certificate verification requirements to be down-graded for some configurations. This was fixed with commit fb688de4 2.0.x and 3dc73c11 1.3.x. This issue was reported to the Tomcat securit...
CVE-2026-77762
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...
DEBIAN-CVE-2026-77762
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...
EUVD-2026-85227
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...
CVE-2026-77762
Apache Tomcat is vulnerable to a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an attacker to inject trailer fields into another HTTP/2 request via a stale HPACK emitter injecting into a recycled pooled request. Affected vers...
CVE-2026-77762 Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...
CVE-2026-77762
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from...