2351 matches found
advisories
Enable Security アドバイザリ このリポジトリには、Enable Security が公開したセキュリティアドバイザリ向けの再現コード、概念実証 PoC スクリプト、および関連ファイルが含まれています。 完全なアドバイザリ: https://www.enablesecurity.com/advisories/ アドバイザリの完全な内容 説明、影響、タイムラインなど は当社ウェブサイトで公開しています。このリポジトリは、研究者や開発者向けに付随する技術リソースを提供します。...
cisco7crack
cisco7crack Cisco enable 7パスワードの暗号化および復号化...
Vulnerability-Disclosure-Policy
脆弱性開示ポリシー 私たちは、脆弱性の開示は相互理解が重要であると考えています。研究者だけでなく、ベンダーも協調的な脆弱性開示に参加しなければなりません。Enable Securityは独自の調査を通じて脆弱性を発見した場合、その脆弱性をベンダーに通知し、詳細は最初の連絡から90日後に防御コミュニティに公開します。ただし、ベンダーが修正プログラムをリリースした場合は、それより早く公開します。 Enable Securityは、ベンダーとの機密通信の確立に合理的な努力を払います。 ベンダーのセキュリティチームまたは指定された連絡先との連絡が確立された後、Enable...
netgear-telenetenable
telnetenable.py Paul Gebheim C ソースから翻訳: http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole 実行方法: python telnetenable.py IP - Netgear デバイスの IP アドレス。通常は 192.168.1.1 MAC - Netgear デバイスの LAN ポートの MAC アドレスを ":" なしで指定します。例: "00:40:5E:21:14:4E" は "00405E21144E" と記述します。 Username -...
CVE-2026-50369
CVE-2026-50369 Windows Server 2025 RDS セッションホスト上の rdpcorets.dll!CRdpPipeGfxPlugin::Enable における TOCTOU 競合状態の再現プログラム。 これは DoS として報告しましたが、このコードパスはどうやら EoP も可能にするようです。 この再現プログラムは DoS パスのみの PoC です。 バグ Enable は this+0x60 にある COM インターフェースポインタを同期なしで2回読み取ります。TerminateInstance...
CVE-2026-61722 FluidSynth: DLS Articulation Chunk Integer Overflow
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expression cbsize + connblocks 12 without first ensuring that the multiplication and addition fit in 32 bits. A crafted DLS...
CVE-2026-61722: Integer Overflow or Wraparound
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expression cbsize + connblocks 12 without first ensuring that the multiplication and addition fit in 32 bits. A crafted DLS...
CVE-2026-61723: Integer Overflow or Wraparound
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues 4 + cbsize without checking whether the multiplication and addition fit in 32 bits. A crafted DLS file can supply a...
Linux Distros Unpatched Vulnerability : CVE-2026-90249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing...
Linux Distros Unpatched Vulnerability : CVE-2026-90273
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is n...
CVE-2026-90273
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
DEBIAN-CVE-2026-90273
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
AZL-102702 CVE-2026-90249 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...
CVE-2026-90273 coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
CVE-2026-90273 coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
CVE-2026-90273
CVE-2026-90273 affects the Linux kernel in the coresight etm4x driver. In the perf enable path, cscfg_csdev_disable_active_config() is not called in two error cases: when branch broadcast is selected but not supported by hardware, and when etm4_enable_hw() fails. This results in a leak of config_...
EUVD-2026-81866
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
CVE-2026-90273: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
EUVD-2026-80636
In the Linux kernel, the following vulnerability has been resolved: usb: typec: hd3ss3220: track VBUS enable state per consumer regulatorisenabled reports the aggregate regulator state, not whether this consumer holds an enable reference. If another consumer enables VBUS first, the driver can ski...