CVE-2026-80850

A flaw was found in the Linux kernel's TCP Authentication Option TCP-AO implementation. An unprivileged local attacker could exploit a race condition when a network device is detached from its Virtual Routing and Forwarding VRF interface. This could lead to a use-after-free vulnerability, causing...

CVE-2026-80837

A flaw was found in the Linux kernel. A race condition exists in the netfilter's nftables subsystem when handling packet path object notifications. This can lead to a use-after-free vulnerability, allowing a local or remote attacker to send specially crafted packets, potentially causing a denial ...

CVE-2026-80778

A flaw was found in the Linux kernel. A race condition exists in the futex/pi Fast Userspace Mutexes / Priority Inheritance subsystem. When a private futex key borrows a waiter's memory management mm structure without proper referencing, the attachtopiowner function can accept an owner from a...

CVE-2026-89791

A flaw was found in the Linux kernel's perf subsystem. A race condition exists between the perf mmap revival and the last munmap operation. This allows a local unprivileged user to exploit a use-after-free vulnerability, leading to local privilege escalation to root...

CVE-2026-89811

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Практический анализ CVE‑2025‑62215 — состояния гонки в ядре Windows, эксплуатируемого в реальных атаках. Демонстрирует повышение привилегий до SYSTEM, сценарии обнаружения и стратегии проверки исправлений для защитников...

CVE-2020-0753-and-CVE-2020-0754

Writeup и PoC для CVE-2020-0753, CVE-2020-0754 и шести неисправленных DOS-уязвимостей Windows Эксплуатация ошибки состояния гонки в файловой системе — анализ CVE-2020-0753 и CVE-2020-0754 Служба отчетов об ошибках Windows исправила 2 ошибки повышения привилегий в последний вторник исправлений. Эт...

CVE-2021-3899_PoC

CVE-2021-3899: Доказательство концепции Воспроизведение 0. Установите старую версию apport: sudo apt-get install apport=2.20.11-0ubuntu27 любая версия apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0...

USN-8887-1: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

Typecho-Multiple-Vulnerabilities

Typecho Multiples Vulnérabilités Ce dépôt contient les exploits des vulnérabilités suivantes : CVE-2024-35538: Dans Typecho v1.3.0, il existe une vulnérabilité d'usurpation d'adresse IP client, qui permet à des acteurs malveillants de falsifier leurs adresses IP en spécifiant une IP arbitraire...

CVE-2020-0753-and-CVE-2020-0754

Writeup и POC для CVE-2020-0753, CVE-2020-0754 и шести исправленных уязвимостей DOS в Windows Эксплуатация ошибки состояния гонки в файловой системе - анализ CVE-2020-0753 и CVE-2020-0754 Служба отчетов об ошибках Windows исправила 2 ошибки повышения привилегий в последний Patch Tuesday, эти две...

WS_RaceCondition_PoC

Состояния гонки в WebSockets В области информационных технологий обеспечение надёжности и целостности данных имеет решающее значение, особенно когда речь идёт о миллионах пользователей и терабайтах данных. Однако по мере усложнения программных систем могут возникать такие проблемы, как состояния...

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 Recherche sur la sécurité des LLM | Divulgation responsable | Évaluation de l'alignement de l'IA Chercheur : Niranj R Mahaswar Destawell Programme de récompense pour les vulnérabilités de Google AI : 889286 — Hors scope Résumé Ce...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps CVE-2025-54918Windows NTLM 취약점의 모의 익스플로잇 및 완화. 탐지 스크립트, Ansible 패치, CI/CD 강화를 포함합니다. 하이브리드 클라우드 환경에서 낮은 수준의 액세스에서 SYSTEM으로 권한 상승을 시연합니다. Mark Mallia 지음 소개: 클릭에서 제어로 - CVE-2025-55226과 CVE-2025-54918 연쇄 공격 오늘날의 하이브리드 클라우드...

CVE-2026-98315

In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfsnonresidentattrshrink calls runlist helpers that require the runlist write lock, but did not hold it while freeing clusters and truncating the runlist. Serialize those...

DEBIAN-CVE-2026-98305

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xxsetup arms the stats poll before mxl862xxsetupmdio, and nothing stops it until dsaregisterswitch has returned an error to mxl862xxprobe. DSA frees the dsaport list...

CVE-2026-98305

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xxsetup arms the stats poll before mxl862xxsetupmdio, and nothing stops it until dsaregisterswitch has returned an error to mxl862xxprobe. DSA frees the dsaport list...

CVE-2026-98276

In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sockgettstamp sk-skflags must only be changed while holding the socket lock, because socksetflag and sockresetflag use non atomic operations setbit and clearbit. sockgettstamp is one of the last places whe...

CVE-2026-98251

In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovsctgetconnlabels adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may reallocate...