99330 matches found
CVE-2026-74596 fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattrprepare The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case,...
CVE-2026-74595 fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in fscryptioctlsetpolicy fscryptioctlsetpolicy calls inodeownerorcapable with &nopmntidmap before allowing an encryption policy to be set, instead of the idmap of the mount the ioc...
CVE-2026-74593 sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
In the Linux kernel, the following vulnerability has been resolved: schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...
CVE-2026-74594 sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpolltimer in psicgroupfree psischedulertpollwork is called locklessly from the scheduler hotpath and can race psitriggerdestroy taking down the last rtpoll trigger under rtpolltriggerlock:...
CVE-2026-74592 ima: Instantiate file_truncate and path_truncate hooks
In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate filetruncate and pathtruncate hooks Instantiate the filetruncate and pathtruncate LSM hooks to reset the action cache flags IMADONEMASK as soon as truncation is requested, so the file, based on policy, is...
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74589 bpf, sockmap: Fix sk_redir use-after-free in send verdict
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket reference for psock-skredir. tcpbpfsendverdict copies that pointer while holding the source socket lock, but does not take a reference for...
CVE-2026-74590 fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...
CVE-2026-74588 sctp: keep chunk->transport in step with the list it is queued on
In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk-transport in step with the list it is queued on sctpoutqflushrtx moves a gap-acked chunk onto another transport's transmitted list without updating chunk-transport: if chunk-tsngapacked...
CVE-2026-74586 sctp: clear new_transport when removing a peer
In the Linux kernel, the following vulnerability has been resolved: sctp: clear newtransport when removing a peer sctpprocessasconfparam stores a newly added peer transport in asoc-newtransport. After all parameters in the ASCONF chunk have been processed, sctpsfdoasconf uses this pointer to send...
CVE-2026-74587 sctp: fix use-after-free of cached ASCONF chunk
In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addiplastasconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctpasconfqueueteardown...
CVE-2026-74585 thunderbolt: Bound the DROM dual link port number before indexing sw->ports
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw-ports tbdromparseentryport validates the device-supplied header-index against sw-config.maxportnumber before indexing sw-ports, but the sibling field...
CVE-2026-74584 RDMA/bnxt_re: zero shared page before exposing to userspace
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: zero shared page before exposing to userspace bnxtreallocucontext allocates uctx-shpg via getfreepageGFPKERNEL. The buddy allocator does not zero pages without GFPZERO, so the page contains stale kernel data from...
Exploit for CVE-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced Directive Injec...
Exploit for Improper Input Validation in Ui Unifi_Os_Server
UniFi OS CVE Proof of Concept Proof of concept untuk pengujia...
RHSA-2026:40938 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
credactor v2.6.0
Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...
essh v0.3.2
root@kitploit: ███████╗███████╗███████╗██╗ ██╗ ██╔════╝██╔════╝██╔════╝██║ ██║ █████╗ ███████╗███████╗███████║ ██╔══╝ ╚════██║╚════██║██╔══██║ ███████╗███████║███████║██║ ██║ ╚══════╝╚══════╝╚══════╝╚═╝ ╚═╝ Enhanced SSH for people with fleets A pure-Rust SSH client with a dense, Netwatch-style TU...
Packet-Sniffer v4.0.0
Packet Sniffer A network traffic monitor for GNU/Linux. Frames are captured from a network interface with a raw socket, decoded layer by layer with the NETProtocols library, and rendered on screen as they arrive: root@kitploit: Frame 4 at 15:42:07 wlan0, 74 bytes + Ethernet 3c:7c:3f:1a:be:22 -...