EUVD-2026-67447

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

Apollo

Apollo Uno strumento di accesso remoto semplice e leggero scritto in Python Apollo è uno strumento di accesso remoto multipiattaforma Windows, Linux, FreeBSD e macOS per Python 3.4+. Le sue funzionalità sono attualmente molto basilari, ma consentono l'esecuzione remota di codice post-exploitation...

outpost

Outpost Gestione dei test e della reportistica AWS Outpost è un semplice strumento per generare file di configurazione AWS per AssumeRole, una funzionalità di test per verificare che gli account funzionino, e un generatore di report per i risultati delle scansioni ScoutSuite. Esegui ScoutSuite...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

kali-rpi-luks-crypt

Cifratura completa del disco per Kali su Raspberry o altre architetture simili usando LUKS Questo HOWTO è dedicato all'esecuzione di Kali su Raspberry o altre architetture simili, es. ODROID-C2 usando la cifratura completa del disco con LUKS. Basato sul documento un po' datato qui. Motivazione...

CVE-2026-80659 mmc: vub300: defer reset until cmd_mutex is unlocked

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...

EUVD-2026-67535

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the response wait times out, vub300commandresponse kills the command URBs and...

CVE-2026-80659

CVE-2026-80659 is a deadlock in the Linux kernel's vub300 MMC/USB driver. When a command response times out, __vub300_command_response() synchronously resets the USB device while vub300_cmndwork_thread() still holds cmd_mutex; the reset path re-enters the driver via vub300_pre_reset() and attempt...

CVE-2026-80641

CVE-2026-80641 affects the Linux kernel wlcore WiFi driver (TI wl12xx and wl18xx chips). The root cause is a firmware version check for IGTK (Individual Group Traffic Key) introduced in an earlier commit that causes the number of enabled ciphers to decrement on every boot when running too-old fir...

EUVD-2026-67517

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641 wifi: wlcore: enable the right set of ciphers

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2024-4885

CVE-2024-4885 PoC per CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Esecuzione di codice remoto non autenticata CVE-2024-4885 Analisi Tecnica Un'analisi della causa principale della vulnerabilità è disponibile sul mio blog:...

CVE-2019-13051

Pi-Hole 4.3.2 Befehlseinschleusung & Privilegieneskalation CVE-2019-13051 Pi-Hole Version 4.3.2 enthält einen Patch für diese Sicherheitslücke:https://github.com/pi-hole/AdminLTE/pull/974 Ein großes Dankeschön an das Pi-Hole-Entwicklungsteam für ihr großartiges Projekt und dafür, dass sie die...

AIF360

AI Fairness 360 AIF360 O kit de ferramentas AI Fairness 360 é uma biblioteca extensível de código aberto que contém técnicas desenvolvidas pela comunidade de pesquisa para ajudar a detectar e mitigar o viés em modelos de aprendizado de máquina ao longo do ciclo de vida de aplicações de IA. O paco...

CVE-2024-6768

CVE-2024-6768: Ungültige Validierung der angegebenen Menge in der Eingabe führt zu einem nicht behebbaren Zustand in CLFS.sys, der einen BSoD verursacht. Einleitung: CVE-2024-6768 ist eine Schwachstelle im Common Log File System CLFS.sys-Treiber von Windows, die durch eine unzureichende Validieru...

CVE-2022-44311

Lettura fuori dai limiti in html2xhtml : CVE-2022-44311 Sommario Html2xhtml v1.3 è stato scoperto contenere una lettura fuori dai limiti nella funzione static void elmclosetreenodet nodo in procesador.c. Questa vulnerabilità consente agli attaccanti di accedere a file sensibili o causare una Deni...

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Bypass del filtro di tarfile Python tramite escape dei symlink con PATHMAX Scrittura arbitraria di file tramite estrazione confilter="data" / filter="tar" Indice Panoramica Dettagli della vulnerabilità Com...

CVE-2024-8190

CVE-2024-8190: Ivanti Cloud Service Appliance Iniezione di comandi autenticata Prova di concetto per sfruttare CVE-2024-8190 su dispositivi vulnerabili. Articolo del blog Causa principale e indicatori di compromissione qui:...

CVE-2024-57376

CVE-2024-57376 Exploit di esecuzione remota di codice pre-autenticazione per D-Link DSR-250 e DSR-250N Avviso di sicurezza: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Utilizzo root@kitploit: $ python3 exploit.py usage: Esempio root@kitploit: $ python3...