CVE-2022-31300

CVE-2022-31300 Haraj Script 3.7 - XSS almacenado autenticado en la sección DM Título del Exploit: Haraj Script 3.7 - XSS almacenado autenticado Fecha: 2022-06-13 CVE: CVE-2022-31300 Autor del Exploit: Abdulaziz Saad @b4zb0z Página web del proveedor: https://angtech.org/ Enlace del software:...

DoodleCloud

DoodleCloud ☁️ 将 Instagram 变成你的个人无限云存储。 DoodleCloud 是一个概念验证 PoC 工具，它利用 Instagram 的内部 API 免费存储无限文件。通过将文件转换为“视觉噪点”图像并以 DM 涂鸦形式上传，我们可以绕过文件类型限制，将 Instagram 的服务器用作后端。 🚀 工作原理 1. 漏洞原理： Instagram 允许用户在私信 DM 中发送“涂鸦”。这些涂鸦本质上是托管在 Facebook CDN 上的 PNG 图像。 2. 编码： DoodleCloud 将任意文件（MP3、APK、ZIP...

agentic-dm-gateway

Agentic DM Gateway Security control plane for LLM agents over private chat typically Discord DMs. It sits in front of your agent. It decides who may talk, whether the session is unlocked, whether the process is paused, and whether this message is safe enough to forward. Your model and tools stay...

Linux Distros Unpatched Vulnerability : CVE-2026-80959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: bound the persisted tail-position offset cacheposdecode takes the persisted keytail and dirtytail segoff from the cache device and addresses within t...

Linux Distros Unpatched Vulnerability : CVE-2026-80955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey ...

Linux Distros Unpatched Vulnerability : CVE-2026-80958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: clamp the tail kset read to the segment data region The tail-kset read in cachereplay, the writeback worker and the GC worker bounds its length by...

Linux Distros Unpatched Vulnerability : CVE-2026-89573

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and...

Linux Distros Unpatched Vulnerability : CVE-2026-80962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache...

Linux Distros Unpatched Vulnerability : CVE-2026-89574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the...

Linux Distros Unpatched Vulnerability : CVE-2026-80961

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: validate kset keynum and intra-segment bounds Two more fields decoded from the cache device go unbounded. The kset keynum drives cacheksetcrc and th...

CVE-2026-80960

A flaw was found in the Linux kernel's dm-pcache component. A local attacker with CAPSYSADMIN capabilities can exploit this vulnerability by supplying a specially crafted cache device. The segnum value, which dictates the size of cache segments, is not adequately validated against the actual devi...

CVE-2026-80956

A flaw was found in the Linux kernel's dm-pcache component. A crafted image can cause the getcachesegment function to return an uninitialized cache segment. This uninitialized segment, containing a null data pointer, is then used by cacheksetclose without a proper null check. This can lead to a...

CVE-2026-80963

A flaw was found in the Linux kernel's dm-stats module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the system to crash, resulting in a Denial of Service DoS...

CVE-2026-80959

A flaw was found in the Linux kernel's device-mapper persistent cache dm-pcache component. A local attacker with administrative privileges CAPSYSADMIN could provide a specially crafted cache device, leading to an out-of-bounds read. This vulnerability allows reading past the intended segment data...

CVE-2026-80962

A flaw was found in the Linux kernel's dm-pcache component. A local attacker with administrative privileges CAPSYSADMIN could manipulate on-disk cache metadata to provide invalid geometry fields. This manipulation could lead to an out-of-bounds read and write, potentially causing memory corruptio...

CVE-2026-89576

A flaw was found in the Linux kernel's device-mapper era dm-era component. When a snapshot operation fails, a block of metadata is allocated but not properly freed. This leads to a permanent leak of system resources with each failed attempt. Over time, this resource exhaustion can result in a...

CVE-2026-89575

A flaw was found in the Linux kernel's device mapper dm-raid1 component. This vulnerability occurs in the buildconstructorstring function, where insufficient space is reserved for a NUL-terminator when formatting a string with sprintf. This oversight can lead to a buffer overflow, potentially...

CVE-2026-89578

A flaw was found in the Linux kernel's device mapper I/O dm-io component. When handling DMIOBIO requests, incorrect sector-based accounting for misaligned direct I/O buffers could lead to an infinite loop. This issue can cause I/O operations to hang indefinitely, resulting in a denial of service...

CVE-2026-89573

A flaw was found in the Linux kernel's device mapper dm array component. A local attacker could exploit this vulnerability by providing specially crafted metadata. This crafted metadata causes the system to misinterpret the size of data blocks, leading to an out-of-bounds read. This memory...

CVE-2026-89574

A flaw was found in the Linux kernel's device mapper dm array component. Insufficient validation of array block headers during read operations allows a local attacker to craft a malicious on-disk nrentries value. This can lead to an out-of-bounds read from the dm-bufio buffer, potentially resulti...