Freeze

ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Freeze o enviar un problema, consulte https://github.com/Tylous/Freeze. Freeze Más Información Si desea obtener más información sobre las técnicas utilizadas en este marco, eche un vistazo a SourceZero Blog Descripción Freeze es una...

EDR-Freeze

EDR-Freeze Dies ist ein Tool, das die Software-Sicherheitslücke von WerFaultSecure ausnutzt, um die Prozesse von EDRs und Antimalware anzuhalten, ohne die BYOVD-Angriffsmethode Bring Your Own Vulnerable Driver verwenden zu müssen. EDR-Freeze arbeitet im Benutzermodus, sodass Sie keine zusätzliche...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Déni de service via récursion illimitée dans la fonctionreplaceEqualDeep de TanStack Query Une seule mise à jour de requête contenant des objets profondément imbriqués peut geler le thread JavaScript indéfiniment , rendant l'application totalement inutilisable. Aucune...

proposal-symbol-proto

Mitigazione della Prototype Pollution / Symbol.proto Autori : Santiago Díaz Google Champion : Shu-yu Guo Google Stage : 1 TOC Descrizione del problema Azione spettrale a distanza Attacchi basati solo sui dati Problemi con freeze, seal e preventExtensions L'errore di override Granularità grossolan...

ColdWer

Ein kalter Krieg auf Ihrem Endpunkt. 🥶 ColdWer ColdWer nutzt den WerFaultSecure.exe PPL-Bypass, um EDR/AV-Prozesse einzufrieren und den LSASS-Arbeitsspeicher auf modernen Windows-Systemen auszulesen. root@kitploit: C O L D W E R └─┴─┴── WerFaultSecure └─┴──────── LSASS Dump └─┴──────────── Cold...

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service DoS, where the affected browser tab may...

CVE-2026-74481

In the Linux kernel, the following vulnerability has been resolved: mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset their underlying virtio devices and delete their virtqueues via...

UBUNTU-CVE-2026-74463

In the Linux kernel, the following vulnerability has been resolved: i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C adapter lock, which triggers when an I2C-controlled clock generator...

CVE-2026-74481

The CVE-2026-74481 entry describes a Linux kernel UAF/GPF during PM suspend caused by page_reporting work being scheduled on the non-freezable system_wq. Child devices (e.g., virtio_balloon) delete virtqueues as part of suspend, but page_reporting_process could still run, triggering virtballoon_f...

UBUNTU-CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

EUVD-2026-59454

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

CVE-2026-74307 ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...

Linux Distros Unpatched Vulnerability : CVE-2026-74463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C...

CVE-2026-68132

A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the dothawallcallback function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further...

CVE-2026-68092

A flaw was found in the Linux kernel's time/jiffies clocksource. During early boot, the jiffies clocksource is used before it is properly registered, causing its maximum delta value to remain at zero. This issue prevents the system's time from progressing, leading to a significant boot delay,...

CVE-2026-72912

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-recipe parser in src/core/Utils.mjs can exhaust client-side CPU when a malformed recipe= URL fragment containing a large number of unmatched quote characters reaches...

CVE-2026-68132

In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen via bdevfreeze dropping the last block layer freeze reference calls...

CVE-2026-68132

In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen via bdevfreeze dropping the last block layer freeze reference calls...

CVE-2026-68132

CVE-2026-68132 concerns the Linux kernel thaw deadlock involving frozen block devices. The root cause is do_thaw_all_callback() calling bdev_thaw() while holding sb->s_umount, which can lead to a deadlock when a block device frozen via bdev_freeze() drops the last freeze reference and fs_bdev_...

CVE-2026-68132 super: fix emergency thaw deadlock on frozen block devices

In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen via bdevfreeze dropping the last block layer freeze reference calls...