The vulnerability of the `remove_phb_dynamic()` function in the `arch/powerpc/platforms/pseries/pci_dlpar.c` module exposes the security of PowerPC-based Linux operating systems, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the removephbdynamic function in the arch/powerpc/platforms/pseries/pcidlpar.c module relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the checkCond_jmp_op() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the checkCondjmpop function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux operating systems, is related to incorrect comparisons. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the sof_ipc4_route_setup() function in the sound/soc/sof/ipc4-topology.c module allows a hacker to cause a service failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the sofipc4routesetup function in the sound/soc/sof/ipc4-topology.c module of the Linux SoC audio support module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the btf_type_is_fwd() function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the btftypeisfwd function in the kernel/bpf/btf.c module, which supports BPF interpreter for Linux kernel, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the tracepoint_add_func() function in the kernel/tracepoint.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tracepointaddfunc function in the kernel/tracepoint.c module of the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Translation Lookaside Buffer (TLB) of the Memory Management Unit (MMU) in ARM microprogramming processor software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Translation Lookaside Buffer TLB of the Memory Management Unit MMU in ARM microprogramming processor systems is related to errors in the representation of certain functions. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrit...

The vulnerability of the hyperv_init() function in the arch/x86/hyperv/hv_init.c module, which supports the x86 kernel of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the hypervinit function in the arch/x86/hyperv/hvinit.c module, which is part of the Linux operating system’s x86 kernel support, relates to incorrect handling of the absence of a special element. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the invalidate_dquots() function in the fs/quota/dquot.c file of the Linux kernel file system allows a attacker to trigger a service failure.

The vulnerability of the invalidatedquots function in the fs/quota/dquot.c file of the Linux kernel file system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the pin_assignment_show() function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pinassignmentshow function in the drivers/usb/typec/altmodes/displayport.c file of the Linux operating system’s USB TypeC driver is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in the i915_perf_add_config_ioctl() function of the drivers/gpu/drm/i915/i915_perf.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the i915perfaddconfigioctl function in the drivers/gpu/drm/i915/i915perf.c module of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacke...

The vulnerability of the amba_device_release() function in the drivers/amba/bus.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ambadevicerelease function in the drivers/amba/bus.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smcr_serv_conf_first_link() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smcrservconffirstlink function in the net/smc/afsmc.c module, part of the SMC protocol family in the Linux operating system’s kernel, is related to improper release of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...

The vulnerability of the ishtp_bus_remove_all_clients() function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem allows a attacker to cause a service failure.

The vulnerability of the ishtpbusremoveallclients function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Bludit CMS 3.20.0 Cross Site Scripting

Bludit CMS version 3.20.0 suffers from a cross site scripting vulnerability in the search plugin. Exploit Title: Bludit CMS 3.20.0 - Reflected Cross-Site Scripting Date: 2026-08-11 Exploit Author: Ranjit Kumar Singh Vendor Homepage: https://www.bludit.com/ Software Link:...

...[ More ]

This Metasploit module exploits an unauthenticated command execution vulnerability in MCPJam Inspector. The /api/mcp/connect endpoint accepts a JSON serverConfig object containing a command and argument list used to start an MCP server. A remote attacker can abuse this endpoint to execute arbitra...

CVE-2026-73296

🚨 CVE-2026-73296 - UFO-Vuln 💥 인증되지 않은 Mobile MCP 접근으로 Android 화면 데이터가 노출될 수 있으며, ADB를 통한 원격 UI 제어 기능이 제공될 수 있습니다. ⚠️ 보안 공지 이 저장소는 공인된 보안 연구, 취약점 검증, 방어적 테스트 및 통제된 실험실 환경에서만 사용하도록 제작되었습니다. 포함된 검사 도구는 비파괴적 인증 경계 검사 를 수행하도록 설계되었습니다. 다음 작업을 수행하지 않습니다 : 임의의 MCP 도구 실행 Android 기기 제어 실제 기기에 대한 ADB 명령 실행...

CVE-2022-42889

🚀 CVE-2022-42889 Text4Shell エクスプロイト CVE-2022-42889 Text4Shell の Python エクスプロイトです。Apache Commons Text のバージョン 1.10.0 未満における重大なリモートコード実行脆弱性です。 📋 目次 説明 脆弱性の詳細 影響を受けるバージョン エクスプロイトの機能 必要条件 使用方法 使用例 動作の仕組み 検出方法 緩和策 参考文献 免責事項 📝 説明 このエクスプロイトは、CVE-2022-42889 Text4Shell を標的としています。これは Apache Commons Text...

OpenNebula-CVE-2025-56535

OpenNebula-CVE-2025-56535 Название эксплойта : OpenNebula 6.10.0.1 - Хранимый XSS межсайтовый скриптинг в атрибуте зоны Автор эксплойта : Mark Artamonov Сайт производителя : https://opennebula.io/ Протестировано на версии : OpenNebula 6.10.0.1 Уязвимые версии : OpenNebula Доказательство концепции...

CVE-2025-6792

익스플로잇: 권한 없는 Pusher 채널 구독 도청 1 Pusher 자격 증명 얻기 브라우저 콘솔에서 root@kitploit: console.log window.wpguppyscriptsvars.pusherKey, window.wpguppyscriptsvars.pusherCluster ; 2 피해자의 비공개 채널 구독 root@kitploit: Pusher Eavesdrop Test Listening on private-user-5 const log = msg = const p =...

CVE-2025-63946-Tencent-PC-Manager-EoP

CVE-2025-63946 Tencent PC Manager 권한 상승EoP 버전: PCManager 버전 17.10.28554.205 이하 요약: Tencent PC Manager에서 C:\Windows\Temp 디렉터리 아래의 파일과 디렉터리가 안전하지 않게 처리되는 취약점을 발견했습니다. 공격자는 심볼릭 링크symlink 공격을 활용하여 SYSTEM 권한의 프로세스가 임의의 파일을 삭제하도록 강제하고, 이를 통해 로컬 권한 상승을 달성할 수 있습니다. 검사 과정에서 NT AUTHORITY\SYSTEM 권한으로 실행되는...