157 matches found
Analysis-for-stage1-shellcode-loader-from-hacking-
来自 Hacking Team 的 stage1 shellcode 加载器分析 代码流程图 网络 IoC https://172\.20\.20\.164 Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDRJS 感染 IoC（释放的文件） 2s5s7k8w8b4i.dat...
SUSE CVE-2026-93204
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadvdatentryadd, it is done using a simple copy function. A parallel reader might only see parts of this update. In worst case, the reader is...
Linux Distros Unpatched Vulnerability : CVE-2026-93204
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadvdatentryadd, it is done using a simple copy function. A parallel reader...
AZL-103035 CVE-2026-93204 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadvdatentryadd, it is done using a simple copy function. A parallel reader might only see parts of this update. In worst case, the reader is...
PT-2026-95000
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where MAC addresses are updated using a simple copy function within the batadv dat entry add function. This lack of atomicity allows a parallel...
CVE-2026-79298
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...
CVE-2026-89949
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadvarpipsrc or the batadvarpipdst will have an unaligned access on HW without native unaligned read...
AZL-101319 CVE-2026-89949 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadvarpipsrc or the batadvarpipdst will have an unaligned access on HW without native unaligned read...
CVE-2026-89951
CVE-2026-89951 affects the batman-adv module in the Linux kernel. During fragment reassembly, the skb from the highest-numbered buffered fragment is reused as the merged packet. If that fragment was received on a hard interface that is deleted before reassembly completes, the merged skb re-enters...
CVE-2026-89949 batman-adv: dat: avoid unaligned fault in IP extraction
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadvarpipsrc or the batadvarpipdst will have an unaligned access on HW without native unaligned read...
CVE-2026-89949 batman-adv: dat: avoid unaligned fault in IP extraction
In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadvarpipsrc or the batadvarpipdst will have an unaligned access on HW without native unaligned read...
CVE-2026-89949
CVE-2026-89949 affects the Linux kernel 's batman-adv module, specifically the DAT (Distributed ARP Table) component. When extracting IP addresses from ARP packets, either batadv_arp_ip_src or batadv_arp_ip_dst performs an unaligned memory access that triggers a fault on hardware lacking native u...
PT-2026-93916
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...
Linux Distros Unpatched Vulnerability : CVE-2026-89949
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: dat: avoid unaligned fault in IP extraction Independent of the alignment of the ARP packet in the SKB, either the batadvarpipsrc or the batadvarpipd...
CVE-2026-79298
Howyar Technologies Inc. SysReturn (specifically the NetCopy feature) is vulnerable to a local Secure Boot bypass due to an incomplete remediation of a previous vulnerability. In versions prior to v11.3.034 , the IA-32 boot path continued to ship the BOOTia32.efi binary, which utilizes a custom P...
CVE-2026-79298
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...
CVE-2026-79298
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...
CVE-2026-79298: Protection Mechanism Failure
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...
EUVD-2026-81014
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrary code via the BOOTia32.efi and a crafted cloak32.dat file on the ESP...
Linux Distros Unpatched Vulnerability : CVE-2026-89951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. Wh...