staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

CVE-2024-47176

CUPS Browsd daemon which is by default running as root if allowed in Linux/Unix systems, allow remote connections from any device on the network to create a new printer. Start the python post server and then send the request to add the printer you will se a connection to your http server as root ...

Linux Distros Unpatched Vulnerability : CVE-2026-79611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when DB in intercepted, Single Stepping is activ...

Linux Distros Unpatched Vulnerability : CVE-2026-79610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which...

Linux Distros Unpatched Vulnerability : CVE-2026-98781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/mediatek: Fix pdev reference leak in mtkdrmbind When the device is not the mmsys master, mtkdrmbind returns early after taking a reference on the disp-mutex...

Linux Distros Unpatched Vulnerability : CVE-2026-98842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - module: fix lost error code from codetagloadmodule If codetagloadmodule fails, err is not set to reflect the failure and loadmodule returns 0 after the module h...

Linux Distros Unpatched Vulnerability : CVE-2026-98555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llc: fix skb UAF and leaks on llcmachdrinit failure In llcconnacresendixxxxset0orsendrr, if llcmachdrinit fails, kfreeskbskb is called instead of kfreeskbnskb...

Linux Distros Unpatched Vulnerability : CVE-2026-98552

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/core: Fix a refcount leak in attachperfctxdata The attachperfctxdata can race on global and !global cases. The global case is protected by...

Linux Distros Unpatched Vulnerability : CVE-2026-98691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to...

Linux Distros Unpatched Vulnerability : CVE-2026-98540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraphdata list when the reservation is not filled fprobefgraphentry...

Linux Distros Unpatched Vulnerability : CVE-2026-98561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfp: hold IPsec RX state under the XArray lock nfpnetipsecrx drops the XArray lock before taking a reference to the xfrmstate it found. The delete path can eras...

Linux Distros Unpatched Vulnerability : CVE-2026-98534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipe: fix use-after-free when auditing a newly loaded policy newpolicy audits the policy after ipenewpolicyfsnode publishes it and drops the new directory's inod...

Linux Distros Unpatched Vulnerability : CVE-2026-112006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verificatio...

Linux Distros Unpatched Vulnerability : CVE-2026-98831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of/overlay: don't leak fragment references when changeset init fails initoverlaychangeset stores the number of initialized fragments in ovcs-count only on full...

Linux Distros Unpatched Vulnerability : CVE-2026-98820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-mq: set RQFUSESCHED when the operation is known The cached requests are allocated for one operation but can be handed out for another. A passthrough command...

Linux Distros Unpatched Vulnerability : CVE-2026-98778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binder: fix isfailure flag for superseded transaction cleanup When a TFUPDATETXN transaction supersedes a pending async transaction, binderreleaseentirebuffer i...

Linux Distros Unpatched Vulnerability : CVE-2026-98589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject pkt arguments in mutating subprogs The verifier tracks changes in how PTRTOPACKET registers' bounds are modified across subprog boundaries...

Linux Distros Unpatched Vulnerability : CVE-2026-98826

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: ac100: Fix clock provider use-after-free on probe failure ac100rtcregisterclks registers the RTC-32k clock with clkhwregisterfixedrate and the clock...

Linux Distros Unpatched Vulnerability : CVE-2026-98740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDAC/altera: Drop init from ECC setup paths for re-probe safety Sashiko reports: Does suppressing sysfs unbinding fully prevent the execution of freed init...

Linux Distros Unpatched Vulnerability : CVE-2026-98856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2,...