CVE-2026-80593

CVE-2026-80593 affects the asus_atk0110 hardware monitoring driver in the Linux kernel. The function atk_ec_present() reads the first element of each ACPI sub-package returned by the GGRP method without first verifying that the sub-package is non-empty. Because ACPICA allocates the element array ...

CVE-2026-80591

This vulnerability affects the f2fs filesystem in the Linux kernel . The flaw resides in f2fs_listxattr(), which fails to validate xattr entries before reading their fields. When a corrupted entry lies outside the valid xattr storage area, the function returns a successful partial result instead ...

CVE-2026-80591 f2fs: fix listxattr handling of corrupted xattr entries

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

EUVD-2026-67467

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

CVE-2026-80590

CVE-2026-80590 is a Linux kernel vulnerability in the IP fragment reassembly code path (inet: frags ). A virtio_net_hdr (via tun/tap or AF_PACKET) can mark an IPv4/IPv6 fragment as GSO; after reassembly the reassembled skb retains this GSO state, and the subsequent call to skb_segment() — which a...

CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

EUVD-2026-67580

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80590

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

CVE-2026-80590 inet: frags: strip GSO state from fragments before reassembly

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtionethdr tun/tap, or AFPACKET with PACKETVNETHDR can mark an IPv4 or IPv6 fragment as GSO; nothing relates gsotype to fragoff...

how-to-bypass-aslr-on-linux-x86_64

Bypassare l'aslr a 64 bit su Linux x86-64 In questo articolo discuterò dell'applicazione della tecnica descritta da Samuel Groß nel suo Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass, per bypassare l'ASLR su Linux x8664. Per dimostrarlo, risolverò una...

process-injection-playground

Linux Process Injection Playground Una raccolta completa di tecniche di process injection per Linux, che dimostra vari metodi per iniettare codice in processi in esecuzione. Questi esempi sono pensati per scopi educativi, ricerca sulla sicurezza e comprensione della manipolazione dei processi Lin...

ghostrace

GhostRace: स्पेक्युलेटिव रेस कंडीशन्स का दोहन और शमन इस रिपॉजिटरी में शामिल हैं: एक न्यूनतम PoC जो स्पेक्युलेटिव रेस कंडीशन की अवधारणा को चरण-दर-चरण सिंगल-थ्रेडेड तरीके से प्रदर्शित करता है। Linux कर्नेल v5.15.83 को स्पेक्युलेटिव कंकरंट यूज़-आफ्टर-फ्री SCUAF गैजेट्स के लिए स्कैन करने हेतु उपयोग क...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - Download Facile per uno Strumento di Sicurezza 📥 Scarica Ora 📖 Panoramica Questa applicazione è una proof of concept per CVE-2025-38352. Dimostra una vulnerabilità nell'implementazione dei timer CPU POSIX del kernel Linux. Il bollettino Android di settembre 2025 segnala che...

loot-me

linux-loot Post-Exploit-Berichtserstellung. Sammelt Dateien / Befehle und stellt sie in Markdown bereit, bereit für die Berichterstellung, und hilft beim Auffinden sensibler Informationen...

CVE-2024-1086

CVE-2024-1086 Universeller lokaler Privilegienausweitungs-Proof-of-Concept-Exploit für CVE-2024-1086, der auf den meisten Linux-Kerneln zwischen v5.14 und v6.6, einschließlich Debian, Ubuntu und KernelCTF, funktioniert. Die Erfolgsquote beträgt 99,4% bei KernelCTF-Images. Betroffene Versionen Der...

pared

Pared Pared é um plano de controle leve e seguro e um painel administrativo web em tempo real escrito em Crystal para segurança de hosts Linux. Ele fornece gerenciamento centralizado para interfaces DBus/CLI do firewalld e conexões NetworkManager, com TLS mútuo mTLS, autenticação PAM/SSSD e...

CVE-2022-0847

CVE-2022-0847 Riproduzione semplice di CVE-2022-0847 Link all'articolo originale del divulgatore: https://dirtypipe.cm4all.com/ Ambiente di riproduzione root@kitploit: Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dipendenze root@kitploit: gcc Passaggi per...

CVE-2017-8890

CVE-2017-8890 Metodo di debug dual-machine del kernel ubuntu Analisi e sfruttamento della vulnerabilità CVE-2017-8890 - Panoramica Analisi della vulnerabilità CVE-2017-8890 - Principi Sfruttamento della vulnerabilità CVE-2017-8890 root ubuntu 16.04@kernel 4.10 Sfruttamento della vulnerabilità...

CVE-2025-6018-and-CVE-2025-6019-Privilege-Escalation

CVE-2025-6018-e-CVE-2025-6019-Escalatazione-dei-privilegi Questa è solo una breve nota su come sfruttare queste vulnerabilità per ottenere root. Inizia utilizzando questo tool sulla macchina attaccante: https://raw.githubusercontent.com/ibrahmsql/CVE-2025-6018/refs/heads/main/CVE-202 Ora dovresti...

anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...