CVE-2026-38470

CVE-2026-38470 is a broken access control vulnerability in the API user endpoint of GazellePW (GazellePosterWall) , specifically at commit 86c4bedf727691b5a97af42a4864869d18446449. An unprivileged, authenticated user holding a standard user-created API token can enable or disable arbitrary user a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - ice: xsk: disabling TXQ interrupts before flushing hardware settings. - iceqpdis attempts to stop a given queue pair that is a target of xsk pool attach/detach. One of the steps involved disabling interrupts on these queues...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fixed deadlock issue when using the NCM gadget The cdns3 driver suffers from the same deadlock issue as fixed in cdnsp with the commit 58f2fcb3a845 „usb: cdnsp: Fixed deadlock issue during use of the NCM gadget”. Unde...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: adv7511: Unregistering the i2c device after unregistering the CEC adapter. The cecunregisteradapter function assumes that the underlying CEC adapter is callable. For example, if the CEC adapter currently has a valid...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a race condition when deleting the quota root from the “dirtycowonlyroots” list. When disabling quotas, we delete the quota root from the fsinfo-dirtycowonlyroots list without locking it, which requires the protectio...

paniclock

PanicLock è un'utility per la barra dei menu di macOS che disabilita istantaneamente Touch ID e blocca lo schermo con un singolo clic o chiudendo il coperchio del laptop. PanicLock colma una lacuna lasciata aperta da macOS: non esiste un modo integrato per disabilitare istantaneamente Touch ID...

EUVD-2026-64418

In the Linux kernel, the following vulnerability has been resolved: schedext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scxlinksched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs th...

CVE-2026-74731 sched_ext: Skip sub-disable teardown for never-linked sub-schedulers

In the Linux kernel, the following vulnerability has been resolved: schedext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scxlinksched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs th...

malvinci

malvinci Dieses einfache Skript stellt eine neue Art von Malware vor, die die Firewall deaktiviert, einen HTTP-Server startet, ihren Port über ngrok weiterleitet und die URL des Servers über einen Telegram-Bot sendet. Du musst einen neuen Telegram-BOT erstellen. Folge den Schritten hier, um einen...

GhostLock

GhostLock - CVE-2026-43499 Exploit di escalation dei privilegi locali Panoramica della vulnerabilità ID CVE: CVE-2026-43499 Tipo di vulnerabilità: futex PI priority inheritance stack UAF Use-After-Free Impatto: kernel Linux 6.1 6.12 Android GKI Effetto dell'exploit: escalation dei privilegi local...

EUVD-2026-63841

Improper Privilege Management vulnerability in Apache CloudStack's Two-factor authentication plugin allowing bypass of the two-factor authentication disable flow. This issue affects Apache CloudStack: from 4.18.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to...

WinDefenderKiller

WinDefenderKiller PermanentDisablefromRegistry Codice C++ per disabilitare permanentemente Windows Defender tramite chiavi di registro Basta compilare ed eseguire! E quando lo riavvio: BYOVDWindowsDefenderKiller Questo modulo implementa una tecnica BYOVD Bring Your Own Vulnerable Driver per...

no-defender

DMCA 08/06/24 Questo progetto è stato rimosso tramite DMCA da qualche azienda, quindi tutte le release, i sorgenti e tutto il resto sono stati cancellati, ma se trovi ancora il mio progetto utile o interessante, lascia una stella 3. no-defender Un modo leggermente più divertente per disabilitare...

asafw

asafw Nota preliminar: recomendamos que você use isto como parte de asatools, mas também pode ser usado de forma independente. asafw é um conjunto de scripts para lidar com firmware Cisco ASA. Ele permite que alguém descompacte o firmware necessário ao depurar com gdb, bem como...

CVE-2026-11751

A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabled, allowing man-in-the-middle attacks against xDS-managed upstream connections...

CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-59825 Mastodon: Unwanted deactivation of SSL/TLS certificate verification

Mastodon is a free, open-source social network server based on ActivityPub. Prior to 4.4.19 and from 4.5.0 until 4.5.12, Mastodon's app/models/concerns/user/ldapauthenticable.rb mutates OpenSSL::SSL::SSLContext::DEFAULTPARAMS when LDAP authentication uses LDAPTLSNOVERIFY=true, disabling SSL and T...

CVE-2026-74260

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfdupnetdev: add nfdevxmitrecursion helpers and use them Update nftdup and nftfwd to use the nfdevxmitrecursion helpers. This patch also disables BH when transmitting the skb to address a possible migration to differen...

CVE-2026-74255

In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipcl2sendmsg Syzbot reported a slab-use-after-free in ipvlanhardheader when called from tipcl2sendmsg. The root cause is that tipcdisablel2media calls synchronizenet while b-mediaptr is still valid. This allows...

CVE-2026-74260 netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfdupnetdev: add nfdevxmitrecursion helpers and use them Update nftdup and nftfwd to use the nfdevxmitrecursion helpers. This patch also disables BH when transmitting the skb to address a possible migration to differen...