Astra Linux – Vulnerability in libde265

There is an incorrect access control vulnerability in libde265 v1.0.8 due to a SEGV in slice.cc...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: erofs: Stop parsing non-compact HEAD indexes if clusterofs is invalid Syzbot generated a crafted image with a non-compact HEAD index of clusterofs 33024. Valid numbers should be between 0 and lclustersize-1, which causes the...

Astra Linux – Vulnerability in binutils

There is a heap-based buffer overflow issue in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. A crafted input can cause segmentation faults, leading to denial-of-service attacks, as demonstrated by c++filt...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed the issue where the mmap write lock was not released. If the mmap write lock is acquired while draining a retry fault, the mmap write lock is not released because svmrangerestorepages calls mmapreadunlock before...

kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

A flaw was found in the Linux kernel's netfilter connection tracking subsystem. The TCP option processing mechanism improperly assumes memory alignment when reading packet headers. A remote attacker could exploit this vulnerability by sending crafted TCP packets with misaligned SACK options throu...

CVE-2025-67445

概要 TOTOLINK X5000R V9.1.0cu.2415 の Web 管理インターフェースには、LAN 上の認証されていないリモート攻撃者がセグメンテーションフォルトを介して Web サービスをクラッシュさせることができる脆弱性が存在します。CGI エンドポイントに過大な HTTP POST リクエストを送信することで、攻撃者はメモリ枯渇を引き起こし、サービス拒否 DoS を招く可能性があります。 脆弱性の詳細 この脆弱性は、ファームウェアの Lighttpd 設定においてリクエストサイズが強制されていないことに起因します。具体的には、以下の制限がコメントアウトされています。...

Starlink-FI

Starlink ユーザーターミナル Modchip このリポジトリは、「Glitched on Earth by Humans: A Black-Box Security Evaluation of the SpaceX Starlink User Terminal」という講演に付随するものです。 スライド資料はこちらから入手できます。講演の録画は近日公開予定です。 この講演では、電圧フォールトインジェクションを行うカスタムModchipを使用して、Starlinkユーザーターミナル上で任意のコードを実行した方法について説明します。 このModchipは、System-on-Chip...

CVE-2023-38545-sample

간단한 설명 이것은 cURL CVE-2023-38545를 시연합니다. 제가 만들 수 있는 한 가장 가볍게 만들었습니다. 설정 먼저 Docker 이미지를 빌드하세요: docker build . -t cveimage 다음으로, 이미지 파일을 간단히 실행하여 임시 Docker 컨테이너를 생성할 수 있습니다. 이 컨테이너는 중지되면 삭제됩니다: docker run --rm --tty --net="host" --name cvecontainer cveimage 명령어 입력이 어려우면 다른 터미널을 열고 다음을 실행하세요: docker...

CVE-2025-62454

이것은 익스플로잇이 아니라 단순한 POC입니다 BUGCHECKCODE: 50 BUGCHECKP1: ffff808b75973000 BUGCHECKP2: 2 BUGCHECKP3: fffff803df12ddda BUGCHECKP4: 0 READADDRESS: ffff808b75973000 Special pool MMINTERNALCODE: 0 IMAGENAME: cldflt.sys MODULENAME: cldflt FAULTINGMODULE: fffff803df110000 cldflt PROCESSNAME:...

JASPER: Special Session on Joint Reliability and Security Assessment of SPlit Computing for Edge Robustness

Split Computing SC enables efficient deployment of Deep Neural Networks DNNs by partitioning inference between edge devices and cloud servers. However, intermediate feature representations are simultaneously exposed to hardware faults and adversarial attacks, which are traditionally evaluated...

CVE-2022-0918

CVE-2022-0918 Red Hat CVE 페이지: https://access.redhat.com/security/cve/cve-2022-0918 패치가 연결된 Github 이슈: https://github.com/389ds/389-ds-base/issues/5242 PoC PoC 애플리케이션은 단일 IP를 입력받으며, IPv4 또는 IPv6 모두 사용 가능합니다. 기본적으로 포트 389로 메시지를 전송하며, 소스에서 변경할 수 있습니다. PoC는 대상에 TCP 연결을 맺고 단일 패킷을 전송하며, 대상 slapd가 세그먼트...

kraker

소개 설정 서버 설정 에이전트 설정 소스에서 빌드 릴리스 사용 연락처 소개 Kraker 는 분산 암호 무차별 대입 시스템으로, 다양한 서버와 워크스테이션에서 hashcat을 실행하고 관리할 수 있도록 설계되었으며, 사용 편의성에 중점을 둡니다. 설계 및 개발 과정에서 두 가지 주요 목표가 있었습니다: 분산 해시 크래킹을 위한 가장 간단한 도구를 만들고 내결함성을 확보하는 것입니다. Kraker 는 서버와 에이전트라는 두 가지 주요 구성 요소로 이루어져 있으며, 이들은 REST API를 통해 통신합니다. 아래에서 설치 및 구성...

CVE-2026-17053

The SMBus driver API exposed smbussmbalertremovecb and smbushostnotifyremovecb as Zephyr syscalls. Their verifiers in drivers/smbus/smbushandlers.c validated only the dev argument with KSYSCALLOBJdev, KOBJDRIVERSMBUS and forwarded the caller-supplied struct smbuscallback cb pointer into kernel-mo...

CVE-2026-17053 SMBus callback-removal syscalls accept an unvalidated user pointer, letting user threads manipulate kernel callback state

The SMBus driver API exposed smbussmbalertremovecb and smbushostnotifyremovecb as Zephyr syscalls. Their verifiers in drivers/smbus/smbushandlers.c validated only the dev argument with KSYSCALLOBJdev, KOBJDRIVERSMBUS and forwarded the caller-supplied struct smbuscallback cb pointer into kernel-mo...

EUVD-2026-90880

The SMBus driver API exposed smbussmbalertremovecb and smbushostnotifyremovecb as Zephyr syscalls. Their verifiers in drivers/smbus/smbushandlers.c validated only the dev argument with KSYSCALLOBJdev, KOBJDRIVERSMBUS and forwarded the caller-supplied struct smbuscallback cb pointer into kernel-mo...

CVE-2022-43343

CVE-2022-43343 の説明 N-Prolog v1.91 において、Main.c の関数 gettoken にグローバルバッファオーバーフローの脆弱性が発見されました。 再現方法 脆弱性を再現するには、脆弱なバージョンの N-Prolog v1.91 をダウンロードし、プロジェクトをコンパイルします。 git clone https://github.com/sasagawa888/nprolog.git cd nprolog git checkout ae7cc9bf6087cfcb57baadbe59f5005c6dc0f09c make...

xpdf-docker

Xpdf Docker イメージ このリポジトリには、CVE-2022-30524 に脆弱な Xpdf バージョン 4.04 の Docker イメージが含まれています。 イメージのビルド 📦 このリポジトリには、以下の3つのフレーバーのイメージが含まれています。 bullseye/gcc : Debian "bullseye"、gcc でビルド bullseye/afl : Debian "bullseye"、afl-clang-fast++ でビルド（デバッグプロファイル） focal/afl : Ubuntu 20.04 LTS Focal Fossa、afl-clang-fast...

CVE-2025-62470

이는 익스플로잇이 아닌, 단순한 개념 증명PoC입니다. BUGCHECKCODE: 50 BUGCHECKP1: ffffc101f6bf91be BUGCHECKP2: 0 BUGCHECKP3: fffff8007e194409 BUGCHECKP4: 0 READADDRESS: ffffc101f6bf91be MMINTERNALCODE: 0 IMAGENAME: CLFS.SYS MODULENAME: CLFS FAULTINGMODULE: fffff8007e190000 CLFS PROCESSNAME: ConsoleApplication4.exe...

SUSE CVE-2026-97906

In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1774345469)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774345469 advisory. - Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the...