37130 matches found
CVE-2026-89436
In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpipccretrievebiosdata rejects SINF packages only when pcc-numsifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...
CVE-2026-89436
CVE-2026-89436 is an out-of-bounds write in the Linux kernel's panasonic-laptop driver (platform/x86). In acpi_pcc_retrieve_biosdata(), a trailing sentinel is written at pcc->sinf[hkey->package.count], but when a DSDT's SINF package count equals SQTY+1 (a known off-by-one hardware quirk han...
CVE-2026-81012
CVE-2026-81012 is an off-by-one write in the Linux kernel's platform/x86: hp-bioscfg driver. The function hp_get_string_from_buffer() uses a strict greater-than (>) comparison when clamping the converted string length against the destination buffer size. When the converted length is exactly eq...
CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...
EUVD-2026-76335
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...
CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...
CVE-2026-81012
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...
Blue-Team-Notes
Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...
Powshell-decode-payload
decodificar código gzip de PowerShell sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd root@kitploit: sal a New-Object;a IO.StreamReadera...
BIT-TOMCAT-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control
Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.0 through 9.0.120. Th...
WEASEL
WEASEL：一种隐蔽的DNS信标 WEASEL是一个小型内存植入程序，使用Python 3，无依赖项。信标客户端会向其控制的DNS区域发送少量主机标识信息。WEASEL服务器可以任务化客户端执行预制或任意命令。 WEASEL是一个阶段1有效载荷，旨在难以检测，并在你那些嘈杂的全功能阶段被捕获时用于重新获得访问权限。 状态 已在操作中成功使用并规避了检测。 客户端可以与服务器建立会话并建立双向通信。 服务器拥有完全可用的CLI。 客户端支持服务器可以任务化的多个功能。 经过压缩+混淆后，客户端大小为5.2KB。 自动混淆功能不足，需要手动修复（参见客户端README中的限制）。...
PT-2026-90467
In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handle in and handle out in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITS PER BYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits...
PT-2026-90312
In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv suspend and nv resume walk the non-PCI configuration space with for i = 0; i register size/sizeofu32; i++ which runs one iteration too many. saved config spa...
PT-2026-90442
In the Linux kernel, the following vulnerability has been resolved: lib/ucs2 string.c: fix out-of-bounds read in ucs2 strnlen Patch series "lib/ucs2 string.c: fix out-of-bounds read in ucs2 strnlen", v2. This series fixes an off-by-one out-of-bounds read in ucs2 strnlen. The first patch is the re...
PT-2026-90158
In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos assoc ioctl isst if clos assoc validates the user-supplied socket id with 'socket id topology max packages', but isst common.sst inst is allocated with topology max packages entries,...
PT-2026-90142
In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp get string from buffer hp get string from buffer clamps the converted string length against the destination buffer size with "size dst size", so when the converted length is...
ONe-TIME-ecb-oracle-attack-AES
ONe-TIME-ecb-oracle-attack-AES...
Axiom-protocol
Axiom: Decentralized and Censorship-Resistant Communication Protocol 🚀 Live Deployment Details Network: Arbitrum One Mainnet L2 Chain ID: 42161 RPC Endpoint: https://arb1.arbitrum.io/rpc or any custom Alchemy/Infura endpoint Axiom Proxy Contract Address: 0xc11CFf8111e8b1F055eba095Efb679a38Abe6b63...
erica
Erica Un vecino para el GreatFET One orientado a las bandas de 315/433/868/915MHz. Este vecino no es un diseño de GreatScottGadgets. Así que si no funciona, no culpes a GSG sino a mí. Nombre Las ramas de la planta erica me recuerdan un poco a las antenas. Y de eso se trata Erica. Un vecino con 4...