CVE-2026-97921

The Linux kernel contains a memory leak in the tracing subsystem. When creating a histogram trigger with a value or variable carrying an invalid modifier, the kernel identifies the error but fails to free the allocated field because it is skipped during the store operation. This results in unrefe...

CVE-2026-97922

The Linux kernel contains a memory leak vulnerability in the tracing subsystem. Specifically, using the same variable three or more times in a single hist trigger causes the variable reference and its associated strings to leak when the trigger is removed. The root cause is that while repeated re...

CVE-2026-97922 tracing: Free histogram var refs regardless of how often they are referenced

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced Using the same variable three or more times in one hist trigger leaks the variable reference and its strings when the trigger is removed. commit...

EUVD-2026-86776

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram var refs regardless of how often they are referenced Using the same variable three or more times in one hist trigger leaks the variable reference and its strings when the trigger is removed. commit...

CVE-2026-97921 tracing: Free histogram the field rejected for a bad modifier

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing a hist trigger whose value or variable carries a modifier that is not allowed there leaks the fields that were built for it. createvalfield takes the field fro...

EUVD-2026-86775

In the Linux kernel, the following vulnerability has been resolved: tracing: Free histogram the field rejected for a bad modifier Writing a hist trigger whose value or variable carries a modifier that is not allowed there leaks the fields that were built for it. createvalfield takes the field fro...

CVE-2026-97920 tracing: Keep the entry count when the histogram stats allocation fails

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

EUVD-2026-86774

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

CVE-2026-97920

The Linux kernel contains a vulnerability where the print_entries() function incorrectly handles memory allocation failures. When a histogram stats allocation fails, the variable n_entries is overwritten with -ENOMEM. Because tracing_map_destroy_sort_entries() treats this value as an unsigned int...

CVE-2026-97526

A vulnerability in the Linux kernel (s390/pai) allows for a kernel panic when CPUs are hotplugged during a perf stat command execution, specifically using pai_crypto/CRYPTO_ALL/. The root cause is the missing allocation of per-CPU data structures for newly added CPUs; the existing dynamic allocat...

CVE-2026-97526 s390/pai: Support CPU hotplug for PMU PAI

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e paicrypto/CRYPTOALL/ -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the missing allocation of per-CPU data structures for tha...

EUVD-2026-86834

In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI The command 'perf stat -e paicrypto/CRYPTOALL/ -- ' crashes the kernel when CPUs are hotplug added during that run. Root cause is the missing allocation of per-CPU data structures for tha...

SecureCodingDojo

Acerca del Secure Coding Dojo El Secure Coding Dojo es una plataforma para impartir formación en codificación segura. Si bien viene con su propia aplicación de entrenamiento vulnerable el sitio web Insecure.Inc, el portal de formación puede utilizarse junto con otras aplicaciones de entrenamiento...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

CVE-2022-2414

EN GenXMLExternalEntityExploit es un script PoC para demostrar la explotación de una vulnerabilidad de Inclusión de Entidades Externas XML XXE. El script aprovecha cargas útiles XML para leer archivos confidenciales de un servidor objetivo. Puede ser útil para pruebas de seguridad, pruebas de...

urx

从 OSINT 档案中提取 URL，助力安全洞察。 Urx 是一款命令行工具，专为从 OSINT 档案（如 Wayback Machine 和 Common Crawl）中收集 URL 而设计。它使用 Rust 构建以追求高效，利用异步处理快速查询多个数据源。该工具简化了为指定域名收集 URL 信息的过程，提供全面的数据集，可用于多种用途，包括安全测试和分析。 功能特性 并行从多个来源获取 URL（Wayback Machine、Common Crawl、OTX、Arquivo.pt） 通过 --cdx-endpoint URL 接入任何其他 CDX 索引服务器——国家网络档案、私有...

CVE-2022-2590-analysis

CVE-2022-2590, Dirty COW restringido a shmem versión del kernel de Linux: Linux/x86 6.0.0-rc1 commit 37887783b3fef877bf34b8992c9199864da4afcb Introducción: esta vulnerabilidad permite al atacante escribir contenido arbitrario en una página de memoria compartida de solo lectura al satisfacer la...

udpack

UDPack UDPack is an extensible generic UDP packet obfuscator. The purpose of this application is to sit in the path of a UDP data stream, and obfuscate, deobfuscate or otherwise modify the packets. Python 3.4 or above is required, since this script uses the asyncio library. Using the latest Pytho...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repositorio para el módulo de Metasploit CVE-2020-15568 Aplicación vulnerable Descripción Existe una vulnerabilidad de invocación dinámica de métodos de clase en el archivo include/exportUser.php que permite ejecutar comandos remotos en dispositivos TerraMaster con...

http-protocol-exfil

http-protocol-exfil Use the HTTP protocol version to send a file bit by bit "HTTP/1.0" is a 0 and "HTTP/1.1" is a 1. It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB...