VectorKernel

VectorKernel PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support x64 family 64bit OS only. Environment All modules are tested in Windows 11 x64. To test drivers, following options can be used for the testing machine: 1. Enable Loadin...

EUVD-2026-116198

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...

CVE-2026-57191

A flaw was found in Asterisk. An unbounded string parsing vulnerability in the respjsippubsub module allows an unauthenticated remote attacker to trigger a stack-based buffer overflow by sending a specially crafted Message Waiting Indication MWI NOTIFY packet. Successful exploitation leads to a...

PT-2026-136080

In the Linux kernel, the following vulnerability has been resolved: pid namespace: prevent TIF NOTIFY SIGNAL from interrupting the reaper Since commit 7fea700e04bd "zap pid ns processes: clear TIF NOTIFY SIGNAL along with TIF SIGPENDING" zap pid ns processes clears TIF NOTIFY SIGNAL before every...

CVE-2026-57185

A flaw was found in Asterisk. An authenticated remote attacker can trigger a buffer over-read in the PJSIP Message Waiting Indication MWI body parser by sending a specially crafted Session Initiation Protocol SIP NOTIFY request. Successful exploitation causes Asterisk to crash, resulting in a...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

PT-2026-135537

Name of the Vulnerable Software and Affected Versions Kamailio versions 6.1.3 through 6.1.4 Description A stack-based buffer overflow occurs in the ims registrar pcscf module. The process contact function copies a port value from the alias parameter of a crafted application/reginfo+xml NOTIFY...

CVE-2026-5229

CVE-2026-5229 CVE-2026-5229: Form Notify Auth Bypass via LINE OAuth Callback CVSS 9.8 Form Notify — LINE OAuth Authentication Bypass Scanner Plugin: Form Notify form-notify Vulnerability Type: Unauthenticated LINE OAuth Authentication Bypass → Account Takeover CVSS Score: 9.8 Critical CVSS Vector...

CVE-2026-119705 SerpBear before 3.1.1 Missing Authentication via POST /api/notify

SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated attackers to trigger notification emails because verifyUser is never called. Attackers can repeatedly POST to /api/notify, optionally with a domain parameter, to exhaust...

CVE-2026-119705

SerpBear versions before 3.1.1 are vulnerable to a missing authentication flaw in the pages/api/notify.ts component. The root cause is that the verifyUser() function is never invoked, allowing remote unauthenticated attackers to send repeated POST requests to /api/notify. This can be used to floo...

CVE-2026-119705 SerpBear before 3.1.1 Missing Authentication via POST /api/notify

SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated attackers to trigger notification emails because verifyUser is never called. Attackers can repeatedly POST to /api/notify, optionally with a domain parameter, to exhaust...

CVE-2026-91131

Summary Home Assistant is vulnerable to a blind Server-Side Request Forgery SSRF via the SSDP integration. An unauthenticated attacker on the local network can send a crafted SSDP "NOTIFY" announcement with an attacker-controlled "LOCATION" header, causing Home Assistant to issue an HTTP request ...

CVE-2026-57191

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in respjsippubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated attack...

Linux Distros Unpatched Vulnerability : CVE-2026-57185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

Linux Distros Unpatched Vulnerability : CVE-2026-104598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive...

PT-2026-128174

In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a replaced pipe autofs notify daemon takes a reference to the current notification pipe under wq mutex, then drops the mutex before writing the request. The write can block while the daemon...

CVE-2026-57191

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in respjsippubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated attack...

CVE-2026-57191

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in respjsippubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated attack...

CVE-2026-57191

Asterisk is vulnerable to a stack buffer overflow in res_pjsip_pubsub.c due to an unbounded sscanf with %s conversion. An unauthenticated attacker can send a crafted SIP NOTIFY packet with an oversized message-summary body field, triggering a 901-byte out-of-bounds write that corrupts the stack m...

EUVD-2026-111397

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded sscanf in respjsippubsub when parsing the MWI NOTIFY Message-Account field may allow an unauthenticated attack...