CVE-2026-97472

The Linux kernel contains a vulnerability in the ipv6 addrconf component where the system permanently loses the ability to generate temporary privacy addresses (RFC 8981) for a prefix after it has been temporarily deprecated and subsequently restored by a router. The root cause is that the addres...

CVE-2026-97455 ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpidsterminatecontrolmethod Fix use-after-free issue in acpidsterminatecontrolmethod by clearing references to method locals and arguments...

CVE-2026-97455

The Linux kernel contains a use-after-free vulnerability within the ACPICA component, specifically in the acpi_ds_terminate_control_method() function. The root cause is a failure to clear references to method locals and arguments during termination. This issue has been resolved by implementing pr...

EUVD-2026-86068

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpidsterminatecontrolmethod Fix use-after-free issue in acpidsterminatecontrolmethod by clearing references to method locals and arguments...

CVE_2019_2215

CVE-2019-2215 - Android Binder UAF Local Privilege Escalation A rewritten Proof-of-Concept / Local Privilege Escalation LPE exploit targeting CVE-2019-2215 , a Use-After-Free vulnerability in the Android Binder driver. I have provided the vulnerable kernel build in the vulnerablekernelbuilds...

CVE-2026-97434

The Linux kernel contains a vulnerability in the dpaa2-switch driver. The issue stems from how NAPI instances are handled during the .remove() path for a DPSW device. Because NAPI instances are shared across all ports but only disabled once the last port goes down, unregistering and freeing ports...

CVE-2026-97434 dpaa2-switch: fix handling of NAPI on the remove path

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

EUVD-2026-86047

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

CVE-2026-19501-poc

CVE-2026-19501 Poc Description: Sureforms is vulnerabale to a unauthenticated CSV injection vulnerability when attacker can inject a CSV formula when submit a form. This formula will be excuted when admin export CSV file and open it. Step to reproduce: Step 1 : Submit a form and then intercept th...

CVE-2026-71518

CVE-2026-71518 — Typemill Unauthenticated Authorization Bypass Path-equivalent URL variants bypass role-restricted media downloads Restriction is keyed on the raw request path; the file is read from the OS-resolved path — the two disagree At a glance · Summary · Root cause · Attack chain · Exploi...

CVE-2026-19500-poc

CVE-2026-19500 Poc and writeup Description Sureforms is vulnerable to a DOS vulnerability , when attacker can submit unlimited key-value pair, leads to resource exhaustion and the administrator can not watch entries temporary. How to reproduce Submit the Form which is made by Sureforms plugin, an...

CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP Independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed the submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...

browser-backdoor

BrowserBackdoor BrowserBackdoor is an Electron application that uses a JavaScript WebSocket Backdoor to connect to the listener. BrowserBackdoorServer is a WebSocket server that listens for incoming WebSocket connections and creates a command-line interface for sending commands to the remote...

EUVD-2026-86212

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

CVE-2026-93823 drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Let driver decide buffer size at AMDKFDIOCGETDMABUFINFO ioctl amdkfd driver needs allocate buffer to return bo metadata to user space. The buffer size is controlled by user currently. It is a potential security issue...

CVE-2026-93823

The Linux kernel 's amdkfd driver contains a vulnerability where the buffer size for the AMDKFD_IOC_GET_DMABUF_INFO ioctl is controlled by the user. A malicious user could provide an excessively large value (e.g., 2 GiB) to trigger an out-of-memory (OOM) condition in the kernel context or cause m...

EUVD-2026-86199

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

CVE-2026-79764

The web-based server management platform Termix versions 2.5.0 through 2.5.1 is vulnerable to an authenticated Server-Side Request Forgery (SSRF) . The /homepage/proxy endpoint accepts a user-provided URL and passes it to http.get or https.get without a destination allowlist. Specifically, the sr...

CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...

cve-2025-55182-react2shell-analysis

CVE-2025-55182 — React2Shell Vulnerability Analysis Overview This project presents a technical analysis of CVE-2025-55182 React2Shell , a critical remote code execution vulnerability affecting React Server Components. The objective of this research was to understand the vulnerability, analyze its...