Rocky Linux 10.1 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc Multiple Vulnerabilities (crlsa-2025_23306)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202523306 advisory. binutils: GNU Binutils Linker heap-based overflow CVE-2025-11082 binutils: GNU Binutils Linker heap-based overflow CVE-2025-11083 Tenable has extracted...

Rocky Linux 9.4 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (ciqsa-2026_1339)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261339 advisory. This advisory aggregates security fixes for the kernel SRPM in CIQ LTS 9.4. It addresses 29 CVEs: CVE-2021-47384, CVE-2023-52623, CVE-2024-26615,...

Rocky Linux 8 [CIQ] Security Update: systemd / systemd-container / systemd-container-debuginfo / etc (crlsa-2022_6206)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226206 advisory. systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c CVE-2022-2526 Tenable has extracted the preceding description block directly...

Rocky Linux 10.0 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2025_11797)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511797 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035...

Rocky Linux 9 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource Multiple Vulnerabilities (crlsa-2026_3291)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263291 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 golang: net/url: Memory exhaustion in...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2017-8570

Uso: Después de descargar el script, modifica attackip por la IP de Kali, LPORT por el puerto que escuchará msf, y DIR por cualquier directorio vacío. Dale permisos 777 al script chmod 777 auto Luego ejecuta el script ./auto Luego, en el directorio DIR+Office8570, encuentra el archivo Invoice.pps...

CVE-2019-18885

CVE-2019-18885 CVE-2019-18885 bobfuzzer Miembros del Equipo Información Resumen Objetivo Reproducir Causas del Error Vista del Depurador Registros de KASAN Agradecimientos bobfuzzer equipo del proyecto en BoB también conocido como Best of the Best, República de Corea. [email protected]...

CVE-2025-39866

CVE-2025-39866 - use-after-free Autor: Byte Reaper Descripción Este POC intenta explotar la vulnerabilidad CVE-2025-39866, que es una falla en sistemas Linux iwb” and schedules the critical free via “wbputmany”. step 3 : - thread 2 : free wbolb - thread 1 - pointer - free object wb free old -...

CVE-2023-32233-reproduction

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root-Cause Analysis What this repo is: my hands-on reproduction and study of CVE-2023-32233, a use-after-free in the Linux kernel Netfilter nftables subsystem that allows local privilege escalation, publicly disclosed in May 2023 by Patryk...

CVE-2025-6019-Exploitation

CVE-2025-6019 – Vulnerabilidad ResizeFilesystem de UDisks2 Reproducción Educativa Este repositorio documenta una reproducción educativa de CVE-2025-6019 realizada en un entorno de laboratorio controlado VM de Ubuntu, no productivo. 🛡️ Aviso de Seguridad Esta investigación reproduce CVE-2025-6019 e...

CVE-2022-0847

DIRTY PIPE CVE-2022-0847 Esta es una vulnerabilidad del kernel que permite sobrescribir datos en archivos arbitrarios de solo lectura, lo que puede llevar a una escalada de privilegios, ya que un proceso no privilegiado puede escribir en un proceso privilegiado. Todo el crédito va para 🥇Max...

kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets

A flaw was found in the vmxnet3 virtual network device driver within the Linux kernel. When processing Geneve-encapsulated packets, the vmxnet3gethdrlen function can incorrectly interpret header information, leading to a mismatch between expected and actual packet protocols or IP versions. This c...

kernel: dm-integrity: don't increment hash_offset twice

A flaw was found in the dm-integrity component of the Linux kernel. This vulnerability arises from an error where a hashoffset variable is incremented twice, leading to incorrect memory access. A local attacker could exploit this issue to trigger a system crash, resulting in a denial of service...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: net/liquidio: drop cached VF pci_dev LUT

A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...

kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math

A flaw was found in the Linux kernel's Soft-iWARP siw component for Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted iWARP Fast Path Data Unit FPDU with a manipulated length field. This manipulation causes an integer underflow, leading to a use-after-free...

r00kie-kr00kie

r00kie-kr00kie Отказ от ответственности Это PoC-эксплойт для уязвимости CVE-2019-15126 kr00k. Этот проект предназначен исключительно для образовательных целей и не может быть использован для нарушения закона или личной выгоды. Автор этого проекта не несёт ответственности за любой возможный вред,...

CVE-2026-34990-CUPS-LPE-PoC

CVE-2026-34990 | CUPS Local Privilege Escalation PoC A generic proof-of-concept for CVE-2026-34990 , a local privilege escalation vulnerability affecting CUPS 2.4.16. The exploit demonstrates how a local unprivileged user can abuse CUPS local authentication and printer configuration behavior to...

CVE-2026-72018

CVE-2026-72018 — Linux Kernel Out-of-Bounds Write Linux Kernel • DIBS Loopback • Out-of-Bounds Write Security research and technical analysis of CVE-2026-72018. 01 — Overview CVE-2026-72018 is a Linux kernel out-of-bounds write vulnerability affecting the DIBS/ISM loopback functionality. The...