CVE-2026-80731 net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

In the Linux kernel, the following vulnerability has been resolved: net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for CAPSYSRAWIO holders: if capableCAPSYSRAWIO memsetllheader + len, 0,...

CVE-2026-80731

In the Linux kernel, the following vulnerability has been resolved: net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for CAPSYSRAWIO holders: if capableCAPSYSRAWIO memsetllheader + len, 0,...

Security update for kubevirt, virt-pr-helper-container

This update for kubevirt, virt-pr-helper-container fixes the following issues: Changes in kubevirt: Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place...

SUSE-SU-2026:3955-1 Security update for kubevirt, virt-pr-helper-container

This update for kubevirt, virt-pr-helper-container fixes the following issues: Changes in kubevirt: - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into plac...

ms-365-mcp-server-PoC

ms-365-mcp-server: security advisory CVE status: reques...

ironclaw ironclaw-v1.4.0

IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...

obsidian-note-toolbar-PoC

Frontmatter-Driven Arbitrary Code Execution in Note Toolbar vi...

agent-scan v0.6.1

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary. Note: CLI output is experimental and subject to...

CTF-Magic

CTF-Magic A GUI-based CTF exploitation framework for Debian...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts2 Vulnerability Detection and Exploitation Tool s2tool...

CVE-2021-38489 HDD Password Stored In Plaintext

HDD password plaintext is stored in a UEFI variable...

CVE-2021-38489 HDD Password Stored In Plaintext

HDD password plaintext is stored in a UEFI variable...

EUVD-2021-34870

HDD password plaintext is stored in a UEFI variable...

CVE-2021-38489

CVE-2021-38489 affects the HddPasswordPei driver in Insyde InsydeH2O 5.x firmware, as shipped in Siemens SIMATIC products. The root cause is that the HDD password is stored in plaintext within a UEFI variable, exposing it to attackers with local, high-privilege access. The vulnerability carries a...

oscp-notes-2026 — Updated!

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2021-43614 VariableEditSmm: Error checking of UEFI variables could cause buffer overflow, leading to code execution

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

EUVD-2021-34869

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2021-43614

CVE-2021-43614 affects the VariableEditSmm component in Insyde UEFI firmware . The root cause is an error in handling the PlatformLangCodes UEFI variable, which can cause a buffer overflow leading to resource exhaustion and failure; the CVE title further suggests potential for code execution . Th...

CVE-2025-4275 — Updated!

🐞 CVE-2025-4275: Hydroph0bia SecureFlash Certificate Shadowing This repository contains research material related to CVE-2025-4275, a Secure Boot bypass vulnerability affecting UEFI-compatible firmware based on Insyde H2O. It centralizes technical analysis of the vulnerability, the binaries...