BrotherVulnerabilities

Multiple Brother Devices: Multiple Vulnerabilities Overview Rapid7 conducted a zero-day research project into multifunction printers MFP from Brother Industries, Ltd. This research resulted in the discovery of eight new vulnerabilities. Some or all of these vulnerabilities have been identified as...

CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

CVE-2023-51385POC

This repository does not have a README...

ps4_8.00_vuln_poc

ps48.xxvulnpoc My take on CVE-2021-30858 for ps4 8.xx...

CVE-2018-6574-POC

This repository does not have a README...

CVE-2026-98458

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS through a reference count leak during Bluetooth Isochronous ISO channel attachment. When a socket attempts to attach to a channel that is already connected or in use by another socket, t...

CVE-2026-95838

A flaw was found in containerd. When unpacking image layers with specific file configurations such as opaque whiteout markers, the unpack handler performs repeated directory traversals. An attacker can exploit this by providing a maliciously crafted container image, leading to a Denial of Service...

CVE-2026-98527

A flaw was found in the Linux kernel's Zynq General Purpose Input/Output GPIO driver. A local user could cause a Denial of Service DoS when requesting a GPIO line fails due to improper reference count handling in the runtime power management subsystem. The error path fails to decrement the usage...

CVE-2026-98516

A flaw was found in the Linux kernel's Nouveau graphics driver. The driver fails to properly release a reference to a PCI Peripheral Component Interconnect bridge device after querying its configuration space during initialization. A local user could exploit this flaw during device setup or bindi...

CVE-2026-98451

A flaw was found in the Linux kernel's SMB client. A local user can trigger this issue by opening an existing symbolic link or non-regular file on an SMB mount using file creation flags. Because the client improperly handles non-regular files during open operations, it fails to release directory...

CVE-2026-111759

markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes...

CVE-2026-111759 markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes

markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes...

CVE-2026-111759 markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes

markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes...

CVE-2026-111759 markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes

markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes rule, potentially leading to denial of service in applications processing untrusted input. Many opening double quotes...

CVE-2026-98461

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability can lead to a Denial of Service DoS due to an out-of-bounds memory read. The issue occurs when the Host Controller Interface HCI socket implementation filters event packets without verifying that the packet buffer is...

CVE-2026-111759

The markdown-it Markdown parser is vulnerable to a denial of service (DoS) due to quadratic processing time in its smartquotes rule. When the typographer: true option is enabled, specially crafted Markdown containing many opening double quotes followed by unmatched closing single quotes (or vice ...

CVE-2026-98526

A flaw was found in the Linux kernel's Logical Link Control LLC subsystem. This flaw allows an adjacent attacker to cause a Denial of Service DoS via a kernel crash. When transmitting an LLC response over stacked network interfaces, such as Virtual Local Area Networks VLANs, the kernel allocates...

CVE-2026-98457

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. An adjacent attacker within Bluetooth range could exploit this vulnerability by transmitting specially crafted, undersized network frames. Because the kernel fails to validate packe...

CVE-2026-98462

A flaw was found in the Linux kernel's Bluetooth subsystem. Improper reference count management during the reuse and binding of Connected Isochronous Stream CIS connections can result in an unbalanced connection hold count. A local attacker could exploit this flaw by triggering specific connectio...

CVE-2026-98521

A flaw was found in the Linux kernel's i915 graphics driver. When a graphics buffer object is concurrently destroyed while its busy status is being queried, an improper teardown sequence can cause the driver to restart its iteration indefinitely. A local attacker can exploit this race condition t...