10924 matches found
HPESBNW05158 rev.1 - Multiple Vulnerabilities in HPE Networking ClearPass Policy Manager (CPPM)
Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Enterprise Software - Please refer to Vulnerability Summary for information on impacted software verisions. - Any hardware running the affected software is...
HPESBNW05156 rev 1 - Multiple Vulnerabilities in HPE Networking AOS-Swtich (AOS-S)
Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 2530 Switch Series - Please refer to Vulnerability Summary for details about affected HPE Networking AOS-Switch AOS-S software versions - Any hardware running the...
PT-2026-107215
Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A sensitive information disclosure issue exists in the client software. An attacker with local access to the affected system could exploit this to obtain...
CVE-2016-1734
补丁并不在安全公告（https://support.apple.com/en-ca/HT206166）所建议的 AppleUSBNetworking.kext 中。 /CVE-2016-1734 md5sum ./10.11.1/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c ./10.11.5/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c 4d297d692f49f12621b0218364486ac0...
CVE-2026-93315
When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...
CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps
When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...
CVE-2026-93315
The BuildKit build engine is vulnerable to a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) when using proxy networking with CA injection. A build step can modify the CA bundle before the cleanup process occurs, potentially causing the cleanup to block, execute outside the build root...
CVE-2026-98101
A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition in the ip6mcsource function allows concurrent packet processing routines to observe inconsistent multicast source filter lists when entries are modified in place. A local user could exploit this flaw by changing...
meshdeck
meshdeck MeshDeck 在 Arch Linux ARM Wilson 上的移植版本 此项目最初移植到了 Arch Linux ARM 的 Wilson 仓库。由于存在重叠且目标相似，Wilson 仓库正在与 ArchAssault 项目 http://www.archassault.org 合并。 所有原始/上游工作由 Dr. Philip Polstra 完成。 摘自其 Sourceforge 页面：http://sourceforge.net/projects/thedeck/ 一个附加模块，允许通过 802.15.4...
CVE-2026-43503
🚨 CVE-2026-43503 — DirtyClone（脏克隆） 当共享内存不再安全共享时。 一个因 Linux 网络协议栈中未正确传播SKBFLSHAREDFRAG 标志而导致的本地权限提升漏洞。 📖 概述 CVE-2026-43503 ，编号为 DirtyClone（脏克隆） ，是一个影响 Linux 内核网络子系统的高危本地权限提升（LPE）漏洞。 该漏洞的存在是因为多个套接字缓冲区（SKB）的分片复制例程在克隆或传输数据包分片时未能保留 SKBFLSHAREDFRAG 标志。...
USN-8851-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...
USN-8851-3 linux-azure-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...
kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation
A flaw was found in the Linux kernel's Quick Fair Queuing QFQ scheduler. The QFQ class deactivation logic incorrectly relies on a child qdisc's queue length qlen to determine if a class is active. A local user with CAPNETADMIN capabilities can manipulate the child qlen into an unexpected state...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211: mesh: Fixed a leak of meshpreqqueue objects The hwmp code uses objects of type meshpreqqueue, which are added to a list in ieee80211ifmesh to track mpath. We need to fix this issue. If the mpath is deleted, the ex...
Security Bulletin: Kernel privilege escalation and disclosure Vulnerabilities in Linux in IBM Cloud Pak System[CVE-2026-46300, CVE-2026-46333, CVE-2026-43284]
Summary Multiple vulnerabilities in the Linux kernel affect the underlying operating system used by Platform system Manager PSM and OS Image for Red Hat Enterprise Linux Systems shipped with Cloud Pak System, . These issues include a local privilege escalation flaw in the networking subsystem...
CVE-2024-36886
N-Day 漏洞研究 概述 本项目聚焦于 Linux 内核中的 N-Day 漏洞 ，重点在于理解其生命周期、分析其影响，并探索缓解策略。N-Day 漏洞是指已公开披露但在许多系统上仍未修补的缺陷，因此成为攻击者眼中的高价值目标。 本研究调查了一个特定的 Linux 内核子系统，并评估了一个真实漏洞（CVE-2024-36886 ），展示了其安全影响，并强调了及时补丁管理的重要性。 目标 对 Linux 内核子系统及其潜在漏洞进行 全面分析 。 利用公开的安全公告和漏洞数据库研究 N-Day 漏洞 。 评估延迟修补的 现实影响 。 探索 自动化工具和框架 在漏洞发现中的作用。...
Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914
Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure网络权限提升漏洞利用 CVE‑2025‑54914 2025年9月4日 作者：Mark Mallia 1. 执行摘要 2025年9月4日，微软的Azure网络服务收到一份关键安全公告，记录了一个权限提升漏洞，编号为CVE‑2025‑54914 。该漏洞在通用漏洞评分系统（CVSS）中获得10.0分，表明这是一个可利用且潜在影响巨大的问题，可在无需用户交互的情况下授予攻击者对Azure网络资源的完全控制。...
Reproducing-ConnMan-1.34
连接管理器 版权所有 C 2007-2012 Intel Corporation。保留所有权利。 功能和特性 连接管理器内置以下功能： - 通用插件基础设施 - 设备和网络抽象（支持基本存储） - IPv4、IPv4-LL（链路本地）和 DHCP - 根据 RFC 5227 的 IPv4 地址冲突检测（ACD） - IPv6、DHCPv6 和 6to4 隧道 - 高级路由和 DNS 配置 - 内置 DNS 代理和智能缓存 - 内置 WISPr 热点登录和门户检测 - 时间和时区配置（手动以及通过 NTP 自动） - 代理处理（手动以及通过 WPAD 自动） -...
wireguard-initramfs
wireguard-initramfs Usa dropbear sobre wireguard. Habilita la red wireguard durante el arranque del kernel, antes de que se monten las particiones cifradas. Combinado con dropbear esto puede habilitar el arranque remoto TOTALMENTE CIFRADO sin almacenar material de claves ni exponer puertos en la...