curveball-plus

curveball-plus ECQV暗黙証明書とWindowsライクな検証器によるCurveball CVE-2020-0601 攻撃のシミュレーション実験 このファイルは常に更新されています！...

CVE-2023-31014_Lab

CVE-2023-31014 Implicit Intent Hijacking Lab NVIDIA GeForce NOW for Android の CVE-2023-31014 公開レポートに基づいて作成した教育用 Android Lab です。NVIDIA のソースコード、実際の Action 文字列、実際の認証情報は含まれていません。 公開レポートで確認できる事実 対象: NVIDIA GeForce NOW Android mobile/TV アプリ 影響を受けるバージョン: 6.00.32705137 6.04.33108832 修正済みバージョン:...

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – OAuth2 暗黙的グラントのフラグメントハイジャック プログラムコード（Node.js + エクスプロイト） root@kitploit: // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri = req.query.redirecturi; const state =...

tomcat-embed-core-9.0.31-CVE-2020-11996

TestHttp2Section51.javaのtestImplicitCloseLargeIdユニットテストのPoCを参照してください: https://github.com/rusakovichma/tomcat-embed-core-9.0.31-CVE-2020-11996/blob/master/test/org/apache/coyote/http2/TestHttp2Section51.java...

Linux Distros Unpatched Vulnerability : CVE-2026-80880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/mlx5: Properly support implicit ODP reregmr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent...

SUSE CVE-2026-80880

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP reregmr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is...

CVE-2026-80880

CVE-2026-80880 affects the IB/mlx5 InfiniBand driver in the Linux kernel. The vulnerability stems from improper handling of implicit ODP (On-Demand Paging) rereg_mr : due to child mkeys in the implicit ODP configuration, the parent mkey could not be modified in place and required a full rebuild. ...

CVE-2026-80880 IB/mlx5: Properly support implicit ODP rereg_mr

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP reregmr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is...

EUVD-2026-71510

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP reregmr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is...

BIT-KEYCLOAK-2026-7571 Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client data

A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID, can bypass a security control intended to disable the implicit flow in OpenID Connect OIDC clients. By manipulating client data during a session restart, an attacker can obtain an access token th...

Astra Linux – Vulnerability in nss

The NSS code used for checking PKCS1 v1.5 was leaking information useful for launching Bleichenbacher-style attacks. Both the overall correctness of the padding and the length of the encrypted message were exposed through timing side-channels. By sending a large number of ciphertexts selected by...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102048)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102048 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at silencing At silencing the playback URB packe...

AZL-96488 CVE-2026-74497 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...

UBUNTU-CVE-2026-74497

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...

CVE-2026-74497

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...

CVE-2026-74497 ALSA: usb-audio: Clamp frame size in implicit-feedback mode

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...

CVE-2026-74497

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode sndusbhandlesyncurb scales received sync packet sizes by the sender's stride and stores the result directly in outpacket-packetsizei. If a connected USB device sends an...

PT-2026-72949

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp frame size in implicit-feedback mode snd usb handle sync urb scales received sync packet sizes by the sender's stride and stores the result directly in out packet-packet sizei. If a connected USB device sen...

CVE-2025-11850

When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...

EUVD-2025-210627

When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks. This allows a subject to be associated with an unintended local account if the same lookup clai...