ROS-20261001-73-0035

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Rocky Linux 10.2 [CIQ] Security Update: firewall-applet / firewall-config / firewalld / etc (crlba-2026_28238)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-202628238 advisory. firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Bug Fixes and Enhancements: firewalld: package...

ROS-20261001-73-0037

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-98082

A flaw was found in the Linux kernel's Btrfs file system. Under specific error handling conditions, such as storage input/output I/O errors or failures during RAID extent operations, the kernel fails to release allocated block I/O tracking memory. A local user capable of triggering these file...

Snow Crash

Snow Crash 本项目是计算机安全的入门教程。Snow Crash 将通过以开发者为中心的方式，帮助你探索安全领域的多个子方向。你将熟悉多种语言（汇编、Perl、PHP 等），培养理解未知程序的逻辑思维，并意识到简单编程错误可能引发的问题。 描述 Snow Crash 是 42 学校网络安全分支的第一个项目。它介绍了一些知名的系统漏洞，主要聚焦于 Linux 操作系统，迫使我们去深入了解它并理解它如何可能被利用。 我们学习的主要主题包括： Linux 文件系统与命令 用户权限 Shell 和 Perl 脚本编写 C 与 PHP 可执行文件 评估 我们于 2025 年 2...

CVE-2026-92937

A flaw was found in vm2. This vulnerability allows an attacker to escape the sandbox environment and achieve arbitrary code execution on the host system. The issue occurs because the sandbox bridge fails to properly sanitize rejected Promise errors when handlers are registered through indirect...

ROS-20260930-73-0016

The vulnerability of the dmaengine kernel component of the operating system is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0198

The vulnerability of the drm/i915/gem component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to cause a service failure...

ROS-20260929-73-0171

The vulnerability of the net/mptcp/subflow.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260929-73-0104

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

CVE-2023-42283

免责声明 仅供教育目的使用！ 详情 CVE-2023-42283 的概念验证。 Tyk Gateway 存在 SQL 注入漏洞。 已在 5.0.7 版本中修复。 “https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid=” 的 URL 参数 ‘apiid’ 存在盲 SQL 注入漏洞。 利用 使用 sqlmap 及以下参数： python.exe .\sqlmap.py -u...

cve-2025-54236

cve-2025-54236 cve-2025-54236 poc 请报告任何错误 未经测试...

CVE-2026-96876 Anonymous reflected XSS in CargoExport invalid-alias errors

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

CVE-2026-96876 Anonymous reflected XSS in CargoExport invalid-alias errors

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

DEBIAN-CVE-2026-98138

In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in syncfs when errors were recorded ntfsputsuper and the remount-read-only path both clear the dirty bit only when NVolErrorsvol is false. ntfssyncfs clears it unconditionally, so any sync on a...

DEBIAN-CVE-2026-98113

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to...

AZL-104478 CVE-2026-97542 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

CVE-2026-97542

In the Linux kernel, the following vulnerability has been resolved: xfs: bail out on bitmap errors in xrepagflfill LOLLM also points out that the xagbbitmapset call in xrepagflfill can fail, but we don't check the result of xagbbitmapwalk, so we silently drop the error and proceed with inconsiste...

CVE-2026-97534

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...

UBUNTU-CVE-2026-97534

In the Linux kernel, the following vulnerability has been resolved: f2fs: accurately adjust freesections during freesegmentrange In freesegmentrange, MAINSECSsbi is temporarily reduced by secs to restrict block allocation to the safe remaining main area while valid blocks in the truncated range a...