EUVD-2026-87380

OpenClaw npm package openclaw before 2026.7.1 incorrectly binds Signal approval reactions. In affected versions, a reaction intended to resolve a structured approval request could instead attach to ordinary outbound text when unrelated outbound messages and a pending approval are present in the...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-98002

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested domain allocation amdiommupdomidalloc returns an int: a domain ID on success, or the negative errno from idaallocrange when the ID space is exhausted or memory is short...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request DEDECMS 5.71SP1以下のバージョンを使用するWebアプリケーションでは、CMSのソースコード論理エラーにより入力されたGETリクエストが判断されず、URLリダイレクトが発生します。 How to...

CVE-2026-98139

In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfsclusterfreefromrlnolock adds a run's length to nrfreed whenever the error bookkeeping condition is false, which includes cases where ntfsbitmapclearrun actually...

CVE-2026-98133

The Linux kernel contains a vulnerability in the ntfs component within the ntfs_set_ea() function. The issue is caused by an exit path that unconditionally updates the HasEA flag based on ea_info_qsize. If an error occurs before ea_info_qsize is updated, NInoClearHasEA() may hide existing on-disk...

CVE-2026-98133

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failure In ntfssetea, the exit path unconditionally updates the HasEA flag based on eainfoqsize. When an error occurs before eainfoqsize is updated, NInoClearHasEA hides existing on-di...

CVE-2026-98051

The Linux kernel contains a vulnerability in the bcmasp networking component within the tx_spb_ring_full() function. The root cause is an improper loop initialization where next_index was reset on every iteration, causing the function to repeatedly test the same descriptor slot instead of checkin...

CVE-2026-98005 erofs: delimit inode_share cache key components

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

Guide-and-theoretical-code-for-CVE-2023-35674

CVE-2023-35674 のガイドと理論的コード CVE-2023-35674 のガイドと理論的コード Android は私のスキル範囲外なので、これを私の視点からこの CVE をどのように悪用するかの概要としてご覧ください。コードスニペットは単なるスケルトンです。助けてください : まず第一に、CVE-2023-35674 単独では悪用できません。なぜか？ CVE-2023-35674 は論理エラーのため、バックグラウンドアクティビティを起動することしか許可しないからです。つまり、この CVE を使ってアプリをバックグラウンドで起動し、CVE-2021-0307...

Linux Distros Unpatched Vulnerability : CVE-2026-98042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Don't resurrect a scalar id dropped by collectlinkedregs checkcondjmpop copies the compared registers into env-false,truereg1,2 before collectlinkedregs ru...

UBUNTU-CVE-2026-98005

In the Linux kernel, the following vulnerability has been resolved: erofs: delimit inodeshare cache key components Previously, inodeshare keys were encoded as follows: fingerprint || domainid It would be better to have a separator between the fingerprint and domain ID so that the fingerprint won'...

poc-CVE-2026-0073

CVE-2026-0073 PoC（Wireless ADB TLS 認証バイパス） このディレクトリには、CVE-2026-0073 用の Python 概念実証コードが含まれています。 このスクリプトは、AI 支援によるコード生成技術を用いて作成されています。 概要 CVE-2026-0073 は、ADB デーモンの証明書検証（auth.cpp 内の adbdtlsverifycert）におけるロジック上の問題です。 この脆弱なチェックでは、EVPPKEYcmp... の戻り値がゼロ以外であれば、すべて成功した一致として扱われます。 期待される比較結果の処理は以下のとおりです。 1 ...

DEBIAN-CVE-2026-97520

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

CVE-2026-35570

サンドボックスからの脱出: openclaude で重大なパストラバーサルバイパスを発見した経緯 CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 すべての脆弱性が高度なエクスプロイトチェーンを必要とするわけではありません。時には、たった1つの場所を間違えた return 文が、セキュリティモデルに大きな穴を開けることもあります。それがまさに CVE-2026-35570 です。 この記事では、openclaude v0.1.7...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2026-97520 gfs2: move quota_init qc iterator increment

In the Linux kernel, the following vulnerability has been resolved: gfs2: move quotainit qc iterator increment Move qc++ from the loop body into the for-loop increment expression in gfs2quotainit. This keeps iterator progression explicit and avoids mixing pointer advance with duplicate-slot...

EUVD-2026-86236

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93231

The Linux kernel contains a vulnerability in the lockd component where the nlmsvc_match_ip() function uses swapped arguments. When releasing locks by server IP address via /proc/fs/nfsd/unlock_ip , the function incorrectly compares a struct sockaddr as a struct nlm_host, leading it to read garbag...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS抑制 DoS脆弱性 🌐 ⚠️ 概要 🚨 Cisco Identity Services Engine ISE における高深刻度 のサービス拒否 DoS 脆弱性！ 💥 認証されていないリモート攻撃者 が、細工したRADIUSパケットでデバイスをクラッシュ させる可能性があります。 📅 公開日 : 2025年11月5日 ✅ 実環境での悪用は確認されていません （今のところ） 🛠️ 仕組み 🔄 「Reject RADIUS requests from clients with repeated failures」...