FTP Fetch, Linux Command Shell, Reverse TCP Stager (IPv6)

Fetch and execute a x86 payload from an FTP server. Spawn a command shell staged. Connect back to attacker over IPv6 Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Linux Meterpreter Service, Bind TCP

Fetch and execute a x86 payload from an FTP server. Stub payload for interacting with a Meterpreter Service Module Options...

📄 OpenBMC bmcweb Denial of Service / Authentication Bypass

This Metasploit module exploits authentication bypass and denial of service vulnerabilities in bmcweb, the OpenBMC HTTP/Redfish web server that runs on BMC firmware for enterprise servers Intel, IBM, HPE, NVIDIA, and various ODMs...

Joern 4.0.578

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

The vulnerability of the e1000_tbi_should_accept() function in the drivers/net/ethernet/intel/e1000/e1000_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to...

PYSEC-2026-1465 Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Improper buffer restrictions in the IntelR Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access...

Exploit for CVE-2026-53359

Januscape Hotfix — CVE-2026-53359 简体中文 Ze...

RHEL 10 : kernel (RHSA-2026:35840)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:35840 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: kernel: ipv6 frag escape Bug Fixes an...

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The publ...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

KVM: x86: Fix shadow paging use-after-free due to unexpected role

...

drm/i915/gem: Fix phys BO pread/pwrite with offset

...

TencentOS Server 2: microcode_ctl (TSSA-2025:1023)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1023 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 2: microcode_ctl bug fix and enhancement update (Important) (TSSA-2025:1021)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:1021 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-53356

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted...

CVE-2026-53356

CVE-2026-53356 concerns the Linux kernel’s DRM i915 GEM phys BO handling. The issue stems from sg_page() returning a struct page pointer instead of a void*, which makes pread/pwrite offset scaling incorrect and risks accessing inappropriate parts of the BO when a non-zero offset is used. The vuln...

CVE-2026-53356 drm/i915/gem: Fix phys BO pread/pwrite with offset

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix phys BO pread/pwrite with offset sgpage returns struct page pointer not void so the scaling of pread/pwrite is wrong for phys BO and wrong parts of BO would be accessed if non-zero offset is used. Last impacted...

The vulnerability of the start_power_clamp() function in the drivers/thermal/intel/intel_powerclamp.c file of the Linux kernel temperature control driver allows a hacker to cause a system failure.

The vulnerability of the startpowerclamp function in the drivers/thermal/intel/intelpowerclamp.c file of the Linux kernel temperature control driver is related to improper elimination of certain elements in the data sent to the client. Exploiting this vulnerability could allow an attacker to caus...

SUSE-SU-2026:22436-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs bsc1266290. - CVE-2025-68822: Input: alps - fix use-after-free bugs caused by...