CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...

Improper Neutralization Of Special Elements In Data Query Logic

MongoDB Python Driver is vulnerable to Improper Neutralization of Special Elements in Data Query Logic. The vulnerability is due to improper handling of caller-supplied structured file identifiers, which allows an authenticated attacker to manipulate GridFS queries to access unintended stored fil...

CVE-2026-98361

A flaw was found in the Linux kernel's RDMA over Converged Ethernet rxe driver. This flaw allows a local attacker to achieve privilege escalation by overwriting arbitrary read-only files. Missing write permission checks during On-Demand Paging ODP operations allow an unprivileged user to map memo...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

cve-2022-49186-research

CVE-2022-49186: بحث في تصعيد الامتيازات في نواة لينكس نظرة عامة بحث أمني وإثبات مفهوم لاستغلال ثغرة CVE-2022-49186، وهي ثغرة في نواة لينكس في مشغل ساعة Visconti تؤدي إلى تصعيد امتيازات محلية من خلال تجاوز سعة مصفوفة. تفاصيل الثغرة النوع : تجاوز سعة مصفوفة بسبب تحويل من signed إلى unsigned درجة CV...

CVE-2026-98355

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...

CVE-2026-98353

A flaw was found in the Linux kernel's erdma Elastic Remote Direct Memory Access driver. A local user could cause a Denial of Service DoS through a system deadlock during concurrent queue creation and hardware interrupt handling. Because internal queue updates do not use interrupt-safe locking, a...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

cve-2021-21551-PoC

cve-2021-21551-PoC يحتوي هذا المستودع على PoC قمت به أثناء التحليل الأعمى لبرنامج التشغيل dbutil23.sys بحثًا عن الثغرة. تم إنشاؤه من خلال تحليل شخصي دون الاطلاع على الكتابات التحليلية writeups أو حتى معرفة أي CVE توجد في برنامج التشغيل هذا. كل ما أعرفه هو أن برنامج التشغيل هذا معرّض لثغرة ما بطري...

CVE-2021-42008

CVE-2021-42008 استغلال ثغرة عمرها 16 عامًا في برنامج تشغيل Linux 6pack مرجع https://syst3mfailure.io/sixpack-slab-out-of-bounds...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

PT-2026-107654

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS encryption gssEncMode=prefer or require, and the server stores the value without an error. The buffer is 16320 bytes...

PT-2026-107718

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

Security update for wpa_supplicant (important)

openSUSE security update: security update for wpasupplicant ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22022-1 Rating: important References: bsc1280914 Cross-References: CVE-2026-78807 CVSS scores: CVE-2026-78807 SUSE : 7.1...

PT-2026-107717

Name of the Vulnerable Software and Affected Versions pgjdbc versions 42.7.11 through 42.7.13 Description The PostgreSQL JDBC Driver fails to enforce restrictions when the requireAuth connection property excludes all six known authentication methods e.g.,...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

KDU

KDU Kernel Driver Utility Configuration requise Windows 7/8/8.1/10/11 x64 ; Privilèges administratifs requis. Objectif et fonctionnalités L'objectif de cet outil est d'offrir un moyen simple d'explorer le noyau et les composants de Windows sans nécessiter de configuration complexe ni de débogueur...

CVE-2026-90136

A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...

CVE-2026-90202

A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys Élévation de privilèges locale Une preuve de concept minimale pour CVE-2026-29923, une vulnérabilité dans le pilote noyau pstrip64.sys EnTech Taiwan PowerStrip ≤ 3.90.736 qui permet à un processus non privilégié en mode utilisateur d'élever ses privilèges à NT...