CVE-2026-35570

Rompiendo el Aislamiento del Sandbox: Cómo Encontré un Bypass Crítico de Path Traversal en openclaude CVE-2026-35570 | CVSS 8.4 Alto | openclaude v0.1.7 No todas las vulnerabilidades requieren una cadena de explotación sofisticada. A veces una sola sentencia return mal colocada es suficiente para...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

CVE-2026-93225

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

DEBIAN-CVE-2026-93225

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

CVE-2026-23723-POC

PoC CVE-2026-23723 - Ayudante de Explotación de Inyección SQL Autenticada en WeGIA Inyección SQL Basada en Errores Autenticada en WeGIA ≤ 3.6.1 GHSA-xfmp-2hf9-gfjp | Aviso Oficial Autor Original del PoC / Reportante : ViniCastro2001 GHSA Publicado por : nilsonLazarin mantenedor del proyecto Este...

MGASA-2026-0448 Updated perl-Net-DNS packages fix security vulnerabilities

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. CVE-2026-64193 Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. CVE-2026-64194 Net::DNS versions before 1.57 for Perl allow memory exhaustion v...

CVE-2026-97512

The Linux kernel contains a vulnerability in the spi-qcom-qspi driver due to incomplete error handling in runtime PM functions. If an operation fails during suspend or resume , resources may remain in inconsistent states, potentially causing clock or power imbalances and brownout risks . The fix ...

EUVD-2026-86106

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb-rootswitch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tbxdphandlerequest return error to the remote host. However, we need to make sure we keep the uui...

CVE-2026-97474 wifi: iwlwifi: mld: purge async notifications upon nic error

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: purge async notifications upon nic error This fixes a kernel panic in reconfig failure: 1. we have a BSS connection 2. we have a NAN connection 3. FW error occurs 4. reconfig restores the BSS connection 5...

EUVD-2026-86039

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access...

CVE-2026-93810

The Linux kernel contains a vulnerability within the cachefiles component. The root cause is a double fput() call occurring during error handling in the cachefiles_create_tmpfile() function. This issue has been resolved in the kernel source. No specific exploit details or in-the-wild exploitation...

EUVD-2026-86180

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TXCMD response layout TXCMD parsing uses framecount to walk status entries and then read the trailing SCD SSN. Make the minimum-length check follow that exact runtime layout calculation before parsing...

CVE-2026-93284 drm/pagemap: dma-unmap pages before handling migration errors

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

EUVD-2026-86163

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

CVE-2026-22020-Weak-Seed-in-Quantum-Key-Distribution-Error-Correction

CVE-2026-22020 – Semilla débil en la corrección de errores de distribución de claves cuánticas Código del programa Python root@kitploit: qkdweakseed.py - Simulated QKD privacy amplification with weak seed import hashlib, os, time def privacyamplificationsiftedkey, seed: Weak: seed derived from...

EUVD-2026-86236

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93231

The Linux kernel contains a vulnerability in the lockd component where the nlmsvc_match_ip() function uses swapped arguments. When releasing locks by server IP address via /proc/fs/nfsd/unlock_ip , the function incorrectly compares a struct sockaddr as a struct nlm_host, leading it to read garbag...

CVE-2026-93225

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

EUVD-2026-86228

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...