CVE-2026-98045

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. Certain stack retrieval helper functions can perform blocking filesystem operations, but were not properly marked as sleepable. A local user with permission to load BPF programs could exploit this flaw by invoking these...

CVE-2026-98044

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This issue allows a privileged local user to cause a Denial of Service DoS or unexpected program rejection by loading a specially crafted BPF program containing legacy packet-load instructions inside callback functions. D...

CVE-2026-98043

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly assumes that certain pointer types are non-null without accounting for unbounded offsets that can wrap around to zero at runtime. A local user with permissions to load BPF programs can exploit thi...

CVE-2022-37706

CVE-2022-37706 Hola chicos, esta vez voy a hablar sobre un reciente 0-day que encontré en uno de los principales gestores de ventanas de Linux llamado Enlightenment https://www.enlightenment.org/. Este 0-day lleva a cualquier usuario a privilegios de root muy fácil e instantáneamente. El exploit...

CVE-2025-66516-POC

⚠️ LEA EL DESCARGO DE RESPONSABILIDAD ANTES DE USAR ⚠️ Solo pruebas educativas/autorizadas | Licencia | Política de seguridad Acerca de este PoC Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2025-66516 , una vulnerabilidad de inyección de entidad externa XML XXE en...

gradient-untangler

gradient-untangler A local research harness that searches for the exact tokens that make an open-weight language model start its answer the way you specify. Open-weight models ship as ordinary files: config.json, a tokenizer, and one or more .safetensors or .bin shards. A Hugging Face id is only ...

CVE-2026-14960-CVE-2026-14961

Vulnerabilidades de Escalada de Privilegios en el Controlador Pegatron TdeIo64 tdeio64.sys | ---|--- Identificadores CVE| CVE-2026-14960, CVE-2026-14961 Fabricante| Pegatron Corporation Producto| Controlador TdeIo tdeio64.sys Interfaz del Dispositivo| \.\TdeIo Tipos de Vulnerabilidad| Control de...

CVE-2026-98041

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier incorrectly predicts that 32-bit conditional branch comparisons between a pointer and zero are always taken, failing to account for valid pointer values whose lower 32 bits can be zero. A local attacker could...

CVE-2026-98040

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. When validating conditional jump operations using register comparisons against null values, the verifier fails to properly track register precision across different execution paths. A local user capable of loading BPF...

abrt_root

Resumen Este repositorio contiene un PoC de explotación para CVE-2025-12744, una vulnerabilidad de escalada de privilegios local en instalaciones predeterminadas de Fedora Linux versiones 43 e inferiores, tanto Escritorio como Servidor. El fallo proviene de una inyección de comandos en el demonio...

CVE-2022-38601

Descripción sugerida Se descubrió que Lotsia Soft Lotsia PDM PLUS v5.80.220414 contiene un desbordamiento de búfer. Tipo de vulnerabilidad Desbordamiento de búfer Fabricante del producto Lotsia Soft Base de código del producto afectado Lotsia PDM PLUS - 5.80.220414 Tipo de ataque Local Impacto...

CVE-2026-97547

A flaw was found in the Linux kernel's XFS file system. When exchanging file ranges between files that share storage blocks reflinks, a local user can trigger a condition where the system prematurely clears copy-on-write protection flags from a file that still retains shared data blocks...

CVE-2026-98038

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When validating programs that manage shared reference-counted objects, the BPF verifier incorrectly treats borrowed references as always valid and fails to require null-pointer checks. A local user can exploit this...

CVE-2026-97546

A flaw was found in the Linux kernel's XFS file system. A local user could trigger this vulnerability by mounting or repairing a corrupted file system containing zero-length directory entries. When salvaging these malformed entries during directory repair operations, the kernel fails to advance a...

CVE-2026-97542

A flaw was found in the Linux kernel's XFS file system. When performing online repair of an allocation group free list AGFL, the kernel fails to check return values during bitmap processing, silently ignoring errors. A local user capable of triggering file system repair operations could cause the...

CVE-2026-98037

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. An improper validation check fails to reject untrusted allocated-object pointers after their protection scope expires, incorrectly recognizing them as valid live objects. A local user with permissions to load BPF programs...

CVE-2026-98034

A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. This flaw allows a local user to achieve privilege escalation by submitting a specially crafted eBPF program. Because the verifier fails to properly track register precision when writing to kernel pointers, it...

CVE-2026-98035

A flaw was found in the Linux kernel's BPF subsystem. When updating or deleting elements in resizable hash tables, the kernel directly releases special object fields rather than safely deferring their cancellation, which is not safe when running in Non-Maskable Interrupt NMI context. A local user...

CVE-2022-29597

CVE-2022-29597: Inclusión de Archivos Locales en RSS v500 La aplicación RRS v500 de Solutions Atlantic es vulnerable a una vulnerabilidad de Inclusión de Archivos Locales LFI. Cualquier usuario autenticado tiene la capacidad de hacer referencia a archivos internos del sistema en las solicitudes...

CVE-2026-98031

A flaw was found in the Linux kernel. When removing a nexthop routing group entry, an error path fails to properly initialize an error-reporting pointer, causing the kernel to dereference uninitialized stack memory. A local user with network administration privileges could exploit this flaw durin...