2227 matches found
netgear-telenetenable
telnetenable.py Paul Gebheim Translated from the C source available from http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Running: python telnetenable.py IP - The IP of your Netgear device, usually 192.168.1.1 MAC - The mac address should be the MAC address of the LAN po...
CVE-2026-50369
CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...
cisco7crack
cisco7crack crypt and decrypt the cisco enable 7 passwords...
advisories
Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...
Vulnerability-Disclosure-Policy
Vulnerability Disclosure Policy We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must participate in co-ordinated vulnerability disclosure. When Enable Security discovers vulnerabilities through its own research, it will notify vendors of these...
Linux Distros Unpatched Vulnerability : CVE-2026-90249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing...
CVE-2026-61723: Integer Overflow or Wraparound
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues 4 + cbsize without checking whether the multiplication and addition fit in 32 bits. A crafted DLS file can supply a...
Linux Distros Unpatched Vulnerability : CVE-2026-90273
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is n...
DEBIAN-CVE-2026-90273
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
CVE-2026-90273
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
AZL-102702 CVE-2026-90249 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...
CVE-2026-90273 coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
CVE-2026-90273 coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
CVE-2026-90273
CVE-2026-90273 affects the Linux kernel in the coresight etm4x driver. In the perf enable path, cscfg_csdev_disable_active_config() is not called in two error cases: when branch broadcast is selected but not supported by hardware, and when etm4_enable_hw() fails. This results in a leak of config_...
EUVD-2026-81866
In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfgcsdevdisableactiveconfig in perf enable In the perf enable path, there are missing cases where cscfgcsdevdisableactiveconfig is not called: - Branch broadcast is selected but not supported by the...
EUVD-2026-80636
In the Linux kernel, the following vulnerability has been resolved: usb: typec: hd3ss3220: track VBUS enable state per consumer regulatorisenabled reports the aggregate regulator state, not whether this consumer holds an enable reference. If another consumer enables VBUS first, the driver can ski...
CVE-2026-80217
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands...
CVE-2026-80217
A hidden functionality issue in Liteon FF-RFI079I4 and FF-RFI078I4 devices allows a user who can log in via SSH and access enable mode to execute arbitrary OS commands , leading to high impact on confidentiality, integrity, and availability (CVSS 3.0: 8.8 HIGH ). The CISA SSVC rating indicates no...
CVE-2026-80217
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands...