CVE-2026-80650 media: atomisp: gc2235: fix UAF and memory leak

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

EUVD-2026-67526

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

EUVD-2026-67501

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80625

CVE-2026-80625 affects the Linux kernel in the RDMA/hns driver. In a corner case of concurrent driver removal and driver reset , a bonding resource is first released in hns_roce_hw_v2_exit() and then re-allocated in hns_roce_register_device(), but the release timing has already passed. This cause...

CVE-2026-80625

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80625 RDMA/hns: Fix memory leak of bonding resources

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In a corner case of concurrent driver removal and driver reset, bonding resource is first released in hnsrocehwv2exit during driver removal, and then is allocated again in...

CVE-2026-80613

CVE-2026-80613 affects the veth driver in the Linux kernel. During XDP enablement , if xdp_rxq_info_reg() or xdp_rxq_info_reg_mem_model() fails, the rollback loop decrements the loop index before the first iteration (for (i--; i >= start; i--)), erroneously skipping the netif_napi_del() call f...

EUVD-2026-67489

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2026-80613 veth: fix NAPI leak in XDP enable error path

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2026-80613 veth: fix NAPI leak in XDP enable error path

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 è una vulnerabilità critica di esecuzione remota di codice in Microsoft Outlook versioni incluse Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 precedenti alla patch di febbraio 2024. Consente a un attaccante non autenticato di aggirare la Visualizzazione protetta di Outlo...

CVE-2026-27495

CVE-2026-27495 — Evasione del Sandbox del JS Task Runner di n8n Evasione del sandbox su n8n JavaScript Task Runner tramite leak dell'oggetto host-realm...

hello-ReGrade-security

hello-ReGrade-security Una demo pratica di scoperta di zero-day conReGrade. Punterai una normale suite di test su ReGrade, la registrerai contro un piccolo servizio, la riprodurrai contro una seconda copia dello stesso servizio , e userai Claude Code + gli strumenti MCP di ReGrade per far emerger...

Blackash-CVE-2025-24071

Blackash-CVE-2025-24071 CVE-2025-24071: NTLM-Hash-Leck durch .library-ms-Datei, Metasploit-Modul 🚨 Beschreibung Die Offenlegung vertraulicher Informationen gegenüber einem unbefugten Akteur im Windows-Datei-Explorer ermöglicht es einem unbefugten Angreifer, Spoofing über ein Netzwerk durchzuführe...

webrtc-ips

STUN-IP-Adressanfragen für WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Was das macht Firefox und Chrome haben WebRTC implementiert, das Anfragen an STUN-Server ermöglicht, die die lokalen und öffentlichen IP-Adressen des Benutzers zurückgeben. Diese Anforderungsergebnisse stehen JavaScript...

CVE-2022-1015-1016

CVE-2022-1015 & CVE-2022-1026 Questo README.md è una traduzione del blog di David. David ha trovato i CVE 1015 e 1016 nel kernel Linux. Puoi visitare la sua pagina web per leggere il documento originale. Ecco i suoi profili social: Twitter Github Un'analisi delle due nuove vulnerabilità Linux in...

CVE-2025-29705

CVE-2025-29705 CVE-2025-29705 Introduzione code-gen: uno strumento di generazione di codice che consente di creare modelli personalizzati per generare codice diverso. Supporta MySQL, Oracle, SQL Server, PostgreSQL. https://gitee.com/durcframework/code-gen Questo progetto non implementa alcun...

CVE-2022-2466---Request-Context-not-terminated-with-GraphQL

CVE-2022-2466 Request-Context-not-terminated-with-GraphQL Come eseguire 1. esegui mvn:quarkus:dev 2. esegui le seguenti richieste http ESEGUI QUESTO DUE VOLTE root@kitploit: POST http://localhost:8080/graphql Content-Type: application/graphql Authorization: Bearer...

CVE-2017-7529-

CVE-2017-7529-Nginx Range Header Integer Overflow Nginx è un server web ad alte prestazioni, ampiamente utilizzato come reverse proxy, server cache e altro, ed è un software open source. Nelle versioni di Nginx precedenti o uguali alla 1.13.2, esiste una vulnerabilità dovuta a un integer overflow...