CVE-2026-89984

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR stack Before Arch LBR gained CPL filtering support, a user-only branch stack could still contain kernel addresses. As a result, kernel branch records may be exposed to user space...

CVE-2025-60880

CVE-2025-60880：Bagisto 管理面板中的存储型跨站脚本（XSS）漏洞 Bagisto 2.3.6 管理面板的产品创建路径中存在一个已认证的存储型 XSS 漏洞，允许攻击者上传包含恶意 JavaScript 代码的特制 SVG 文件。该漏洞可被已认证的管理员用户利用，在浏览器中执行任意 JavaScript，可能导致会话劫持、数据窃取或未授权操作。 漏洞概述 CVE ID ：CVE-2025-60880 类型 ：跨站脚本（XSS） CVSS 评分 ：6.9（中危） CVSS 向量 ：CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

创建易受攻击的Docker环境-CVE-2023-30212- 使用git clone从我的仓库下载文件 git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git 现在设置docker镜像 创建docker镜像 使用命令 sudo docker build -t work . 运行docker容器 使用命令 sudo docker run -d -p 80:80 work 现在我们将获取容器ID 查看OURPHP...

CVE-2026-89892

CVE-2026-89892 is a use-after-free in the Linux kernel's em28xx media driver. On dual-TS boards , the audio-only path registers extensions during primary device probing, before the secondary device (dev_next) is created. The duplicate device inherits is_audio_only and is independently inserted in...

EUVD-2026-80492

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this happens before devnext is created. The duplicate device inherits...

CVE-2026-89892

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this happens before devnext is created. The duplicate device inherits...

CVE-2026-89892 media: em28xx: defer audio-only extension registration

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this happens before devnext is created. The duplicate device inherits...

CVE-2026-89892 media: em28xx: defer audio-only extension registration

In the Linux kernel, the following vulnerability has been resolved: media: em28xx: defer audio-only extension registration The audio-only path registers extensions while probing the primary device. For a dual-TS board, this happens before devnext is created. The duplicate device inherits...

CVE-2026-89890 media: go7007: defer the ALSA v4l2 put until card release

In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007sndinit already takes a v4l2device reference for the ALSA side, but go7007sndremove drops it immediately after calling sndcardfreewhenclosed. That is too early when ...

EUVD-2026-80490

In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007sndinit already takes a v4l2device reference for the ALSA side, but go7007sndremove drops it immediately after calling sndcardfreewhenclosed. That is too early when ...

CVE-2026-89890

CVE-2026-89890 is a use-after-free in the Linux kernel's go7007 media driver. In go7007_snd_remove(), the v4l2_device reference is dropped immediately after snd_card_free_when_closed(), which is too early when a userspace process still has the capture PCM open. The ALSA card's PCM callbacks remai...

CVE-2026-89890

In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007sndinit already takes a v4l2device reference for the ALSA side, but go7007sndremove drops it immediately after calling sndcardfreewhenclosed. That is too early when ...

CVE-2026-89890 media: go7007: defer the ALSA v4l2 put until card release

In the Linux kernel, the following vulnerability has been resolved: media: go7007: defer the ALSA v4l2 put until card release go7007sndinit already takes a v4l2device reference for the ALSA side, but go7007sndremove drops it immediately after calling sndcardfreewhenclosed. That is too early when ...

CVE-2026-89867

CVE-2026-89867 affects the Linux kernel chips-media wave5 VPU driver in the media subsystem. Decoder instances sharing a VPU also share a single v4l2_m2m job slot . During end-of-stream (EOS), device_run() defers job_finish() expecting a DEC_PIC completion IRQ to release the slot. However, a job ...

CVE-2026-89867

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer jobfinish only when a DECPIC was queued Decoder instances sharing a VPU also share one v4l2m2m job slot, released when the running context calls v4l2m2mjobfinish. While draining, devicerun defers...

CVE-2026-89867 media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer jobfinish only when a DECPIC was queued Decoder instances sharing a VPU also share one v4l2m2m job slot, released when the running context calls v4l2m2mjobfinish. While draining, devicerun defers...

CVE-2026-89867 media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer jobfinish only when a DECPIC was queued Decoder instances sharing a VPU also share one v4l2m2m job slot, released when the running context calls v4l2m2mjobfinish. While draining, devicerun defers...

EUVD-2026-80467

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Defer jobfinish only when a DECPIC was queued Decoder instances sharing a VPU also share one v4l2m2m job slot, released when the running context calls v4l2m2mjobfinish. While draining, devicerun defers...

s2-048

s2-048 Exploit para s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu es un script de cliente MySQL basado en Ruby que escribí. Hace la mayoría de las cosas que un cliente MySQL normal podría hacer: SQL Shell, Actualizar/Eliminar/Borrar Base de Datos/Tabla, Agregar/Eliminar Usuarios, Volcado de Bases de Datos/Tabla con opción de gzip...