CVE-2026-79602 x86: improper handling of HVM emulation return codes

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A flaw exists in the Xen hypervisor where a malicious guest operating system with an assigned PCI device featuring a Base Address Register (BAR) mapped to the I/O port space can trigger an internal BUG() . This vulnerability is caused by the improper handling of HVM emulation return codes . The i...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

UBUNTU-CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on arm64 architectures. This vulnerability occurs because certain page table walk operations, used in fault injection and Address Translation AT emulation, do not properly acquire a Sleepable Read-Copy Update...

qiling v1.4.11

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

EUVD-2026-71627

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

PT-2026-91805

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

lure v0.7.1

lure Local Linux binary analysis. Zero cloud. Zero root. Zero cost. lure is a local Linux ELF analysis and sandboxing tool for security researchers, reverse engineers, and CTF players. Version 0.7.1 adds ARM64 binary support via QEMU user-mode emulation. It provides three complementary workflows:...

sogen — Updated!

Sogen runs Windows and Linux programs without a real operating system, and lets you see and control everything they do. Instead of reimplementing thousands of OS APIs, Sogen emulates binaries at CPU and syscall level and runs the real system DLLs , so behavior closely matches the real OS. Every...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

cowrie v3.0.12

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

QEMU Loop Exit Condition DoS

The vulnerability of the QEMU hardware emulation software is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

ish builds/813

iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials README中文 如若未能保持最新，请提交PR以更新 Hacking...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...

QEMU Virtio-Snd System Failure

The vulnerability of the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a system failure...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...