hot-jar-swapping-urlclassloader

Intercambio en caliente de JAR con URLClassLoader El siguiente código de ejemplo demuestra la capacidad de intercambiar en caliente un JAR ya cargado y obtener ejecución de código abusando del hecho de que las clases internas todavía acceden al archivo JAR cuando se invocan, siempre y cuando el...

CVE-2022-2602

CVE-2022-2602 Este repositorio contiene exploits para CVE-2022-2602. Hay dos versiones del mismo: Exploit que utiliza la técnica userfaultfd. Exploit que utiliza la técnica de bloqueo de inodos. ¡Disfruta! : LukeGix...

ROS-20260928-73-0039

The vulnerability of the squashfsread inode function in the SquashFS file system of Linux operating systems is related to the comparison of numerical ranges without any minimum checks. Exploiting this vulnerability could allow a attacker to cause a service failure...

VQ-RefluxCore

VQ-RefluxCore: Framework de Evaluación e Investigación de Vulnerabilidades del Kernel VQ-RefluxCore es un framework avanzado de investigación en seguridad diseñado para modelar, analizar y demostrar mecánicas de Escalada Local de Privilegios LPE asociadas con condiciones de carrera a nivel de...

CVE-2026-100542

OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...

CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2

OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...

CVE-2026-100542

The OpenClaw (npm package 'openclaw' ) versions >= 2026.5.28 and

CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2

OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...

EUVD-2026-87508

OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...

CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2

OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...

PT-2026-99179

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.5.28 through 2026.8.0 Description The tar.bz2 skill installer mishandles archive listings by treating bounded command-output suffixes as complete listings. A specially crafted .tar.bz2 or .tbz2 skill archive can push...

CVE-2026-97933 tracing: Take trace_array reference when opening a tracer options file

In the Linux kernel, the following vulnerability has been resolved: tracing: Take tracearray reference when opening a tracer options file When a tracer option file is opened, it is passed a descriptor that points to an element on the tracearray's topts array. This element has information to find...

CVE-2026-97543

In the Linux kernel, the following vulnerability has been resolved: xfs: destroy seen inode bitmap when we fail to add a dirpath LOLLM observes a memory leak in xchkdirtreecreatepath if we create the directory path object but appending the name to the path fails. When this happens, we don't tear...

CVE-2026-97606

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofsfillsuper In autofsfillsuper, we create a new inode using autofsnewino, however, if we fail to create rootinode, that is, rootinode failure path, we return -ENOMEM without freeing the new...

CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

PT-2026-98546

In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs fill super In autofs fill super, we create a new inode using autofs new ino, however, if we fail to create root inode, that is, root inode failure path, we return -ENOMEM without freeing the...

PT-2026-97945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the make bad inode function is used within ocfs2 read inode block full. Because make bad inode resets the inode type to S IFREG, applying this t...

ROS-20260923-73-0073

The vulnerability of the niwrite inode function in the fs/ntfs3/frecord.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-90419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: prevent out-of-bounds read in super root block parsing super-root inode metadata size is trusted before nilfsreadinodecommon. Reject super-root inode...

CVE-2026-90139

This vulnerability affects the Linux kernel FUSE (Filesystem in Userspace) module. The root cause is a NULL pointer dereference in fuse_fill_super_submount(): when fuse_iget() fails to allocate an inode (e.g., under memory pressure), the resulting NULL is passed unchecked to get_fuse_inode(), cau...