Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 クロスサイトスクリプティングXSS 割り当てられたCVE番号: CVE-2017-9609...

Fourteen_Endpoints

中间人 Apple隐私中继内的空壳公司 一个匿名的特拉华州有限责任公司发布了一款圣经祈祷应用、一本每日日记和一个来电识别工具到App Store。该实体在Apple的隐私网络内运营加密中继基础设施。该中继终止于台湾大哥大股份有限公司。 你可以现在就确认它是活跃的。三个命令。 2024年，Apple推出了用于实时来电识别的Oblivious HTTP（遗忘HTTP）。你的手机会询问谁来电。Apple的中继会从问题中剥离你的身份。第三方提供商在不了解提问者身份的情况下回答问题。中继能看到你的IP但看不到问题。提供商能看到问题但看不到你的IP。没有人能同时看到两者。...

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 クロスサイトスクリプティング XSS 割り当てられたCVE番号: CVE-2017-7188...

cve-disclosures

CVE 披露 协调漏洞披露及 CVE 引用，由 Anindya Sankar Roy GitHub: @fr3akhacks 发布。 以下每个条目均链接到一份公开公告，包含受影响产品、受影响/修复版本、CVE ID、描述、漏洞类型、根本原因及影响。 osTicket Enhancesoft LLC CVE ID| Title| Type| CWE| CVSS 3.1| Affected ---|---|---|---|---|--- CVE-2026-38444| 通过邮件 From 头显示名进行的存储型 XSS| 存储型 XSS| CWE-79| 8.1| osTicket =...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

fake-useragent

fake-useragent 基于真实世界数据库的最新版简单 useragent 伪造器。 特性 数据预先从 Intoli LLC 下载并进行后处理，且数据是该包自身的一部分 数据包含广泛的浏览器代理及多种浏览器 获取 user-agent 字符串（包括 desktop、tablet 和/或 mobile 类型的 UA） 获取 user-agent 的 Python 字典（即对象），包含诸如 useragent、percent、type、devicebrand、browser、browserversion、os、osversion 和 platform 等字段 支持 Python 3.9...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: llc: A test for maclen should be performed before reading the MAC header. The LLC layer reads the MAC header using ethhdr, without verifying that the skb contains an Ethernet header. Syzbot was able to access the llcrcv functi...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: llc: Calling sockorphan at the release time syzbot reported an interesting trace 1 caused by a stale pointer to sk-skwq in a closed llc socket. In the commit ff7b11aa481f "net: socket: setting sock-sk to NULL after calling...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: llc: Support for ETHPTR8022 has been removed. The syzbot reported a bug related to uninit-values. 0 llc previously supported ETHP8022 0x0004 and also ETHPTR8022 0x0011. The syzbot exploited this to trigger the bug. The code us...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: llc: Makes llcuisendmsg more robust against changes to bonding. syzbot was able to exploit llcuisendmsg, allocating a skb without sufficient headroom, and then attempting to append 14 bytes of Ethernet header information. Like...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel before version 5.17.1, a refcount leak bug was discovered in the net/llc/afllc.c file...

SUSE CVE-2026-74719

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

AZL-97179 CVE-2026-74719 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

CVE-2026-74719

CVE-2026-74719 is a memory leak in the Linux kernel's SMC (Shared Memory Communications) module, specifically in smc_llc_event_handler(). The SMC_LLC_CONFIRM_LINK / SMC_LLC_ADD_LINK_CONT branch stores an incoming qentry into the local LLC flow without first checking whether a qentry is already pe...

CVE-2026-74719 net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

EUVD-2026-64406

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

CVE-2026-74719 net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

PT-2026-79724

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRM LINK and ADD LINK CONT in smc llc event handler The SMC LLC CONFIRM LINK / SMC LLC ADD LINK CONT branch in smc llc event handler stores an incoming qentry into the local LLC flow without...

Linux Distros Unpatched Vulnerability : CVE-2026-72022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llc: fix SAP refcount leak in llcuiautobind llcuiautobind opens a SAP after choosing a dynamic LSAP. llcsapopen returns a reference owned by the caller, and...

CVE-2026-72022

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. The llcuiautobind function fails to properly release a reference to a Service Access Point SAP after a successful autobind operation. A local user can repeatedly perform autobind and close cycles, which leads to the...