CVE-2026-74678

A flaw was found in the Linux kernel's ax88179178a USB network driver. When the network interface has scatter-gather SG enabled and a packet linearization operation fails, the system fails to free the associated memory buffer. This oversight leads to a memory leak, which could be exploited by an...

CVE-2026-74622

A flaw was found in the Linux kernel's 'atlantic' network driver. The aqringrxdeinit function, responsible for deinitializing receive RX buffers, fails to properly free pages and their associated Direct Memory Access DMA mappings for buffers that have been consumed but not yet refilled. This...

CVE-2026-74699

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability occurs due to improper handling of the q-replaystate, where it is blindly overwritten. This can lead to a memory leak of previously allocated resources. An attacker could exploit this flaw to exhaust system memory,...

mongobleedburp

Estensione Burp MongoBleed Estensione di Burp Suite per rilevare CVE-2025-14847 MongoBleed tramite test di leak manuali da una scheda UI dedicata. Repository: https://github.com/j0lt-github/mongobleedburp Versione attuale: 1.1.0 Funzionalità Scheda UI per test manuali con host/porta e offset...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Obiettivo L'obiettivo di questo progetto era valutare un host remoto per la vulnerabilità Heartbleed CVE-2014-0160, verificarne la presenza e sfruttarla per estrarre potenziali informazioni sensibili dalla memoria del server tramite il protocollo TLS. Esecuzione 1. Identificazione dei servizi...

ctf

Cose relative al CTF Indice Le sfide sono collegate nella tabella seguente. Descrizione| Evento/Gioco| Soluzione ---|---|--- Smash The Stack| ---| --- Blackbox| Level 1| Un eseguibile con una funzionalità di "login" con la password in testo semplice nella memoria. Blackbox| Level 2| Un eseguibile...

intel-me-research

Reverse Engineering del Firmware Intel ME — Analisi Live di CSME 16.x "Il tuo computer contiene un secondo computer segreto. Lo abbiamo trovato, mappato e documentato ciò che si nasconde al suo interno." 🔥 PROVALO TU STESSO — HECI SPY 🔥 Uno script Python. Zero dipendenze. Parla direttamente con i...

KeePass-CVE-2023-32784-Exploitation-and-Defense

Vulnerabilità di Perdita di Memoria di KeePass CVE-2023-32784: Architettura di Sfruttamento e Difesa Obiettivo Analizzare la vulnerabilità CVE-2023-32784 in KeePass Password Safe v2.53, dimostrare l'estrazione della password master tramite dump della memoria e progettare controlli robusti di...

3007Project

3007Project Programa setuid usado para atualizar a pontuação do jogador. Lê o conteúdo do arquivo de pontuação, procura e atualiza a pontuação com base no ID do jogador fornecido. Se nenhum ID de jogador for encontrado, um novo ID e pontuação são adicionados ao arquivo. O programa não deve falhar...

HeartbleedAttack

Heartbleed-Angriff: Java-basierte Angriffsdemo Übersicht Dieses Repository enthält Heartbleed.java, einen benutzerdefinierten Java-basierten Exploit zur Demonstration der Heartbleed-Sicherheitslücke CVE-2014-0160. Er extrahiert vertrauliche Daten von einem verwundbaren Server IP: 192.168.1.132, a...

CVE-2026-74722

A flaw was found in the Linux kernel's btrfs filesystem. A local attacker could exploit a memory leak in the btrfsdoencodedwrite function. This occurs because an extent changeset is not properly freed before the function returns. Successful exploitation of this memory leak could lead to a denial ...

EUVD-2026-64924

The UMP Stream responder library in lib/midi2/umpstreamresponder.c builds reply packets in a 16-byte struct midiump uint32t data4. The builders makeendpointinfo and makefunctionblockinfo populate only the first two words res.data0 and res.data1 and, before this fix, declared their result as an...

SUSE-SU-2026:3757-1 Security update for the Linux Kernel (Live Patch 55 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.222 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

CVE-2026-74623

A flaw was found in the Linux kernel's atlantic network driver. When a network interface using this driver is deinitialized while under transmit TX or XDPTX load, certain transmit buffers are not properly released. This oversight leads to a memory leak, which can prevent the proper shutdown of...

CVE-2026-74620

A flaw was found in the Linux kernel's net/sched subsystem, specifically within the actgact and actpolice modules. A local user could exploit this vulnerability by providing a specially crafted control action that bypasses proper range checks. This improper handling of control actions leads to an...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-74692

A flaw was found in the Linux kernel's net/smc component. A time-of-check to time-of-use TOCTOU race condition allows a remote attacker to exploit a window where the listener's state is checked without proper locking. By opening TCP connections while the server is closing, an attacker can cause a...

spectre-attack-example

Esempio di attacco Spectre 2 gennaio 2018 CVE-2017-5753 e CVE-2017-5715 Esempio di sfruttamento della vulnerabilità Spectre "fantasma" Cos'è questo? Mettiamo il testo "The Magic Words are Squeamish Ossifrage." in memoria, e poi proviamo a leggerlo sfruttando la vulnerabilità. Se il sistema è...

CVE-2026-74719

A flaw was found in the Linux kernel's Server Message Block SMB over Remote Direct Memory Access RDMA SMC protocol implementation. A remote attacker, by sending a duplicate link confirmation or addition request, can cause a memory leak. This occurs because the system overwrites an existing memory...