CVE-2026-98240

A flaw was found in the Linux kernel's IP tunnel subsystem. When processing network routes with encapsulation options, the subsystem references tunnel options before their length is initialized. A local user with network configuration privileges can exploit this flaw by adding routes with specifi...

CVE-2026-102916 Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions

CVE-2026-28992 : Conditions de course dans IOHIDFamily FastPathUserClient CVE-2026-28992 | Auteur : Johnny Franks @0xjohnny Composant : IOHIDFamily Impact : Un attaquant pourrait provoquer une terminaison inattendue d'une app Description : Une vulnérabilité de corruption mémoire a été corrigée pa...

ScreenOff

ScreenOff CVE-2026-52910 preuve de concept de crash du noyau. ref: https://github.com/5unkn0wn/security-research/tree/CVE-2026-52910ltscosmitigation Description socket + SOATTACHREUSEPORTCBPF + setsockopt race. timerfd/epoll callback storm ralentit le chemin de réception. remplacer le filtre cBPF...

CVE-2026-43499-PoC-Scanner

Scanner PoC CVE-2026-43499 Ce dépôt contient un scanner basé sur Go et une implémentation de preuve de concept PoC pour une vulnérabilité du noyau Linux liée à CVE-2026-43499. Ce projet est destiné uniquement à la recherche, à l'analyse défensive et aux tests de sécurité autorisés. Aperçu Le code...

CVE-2022-36946

CVE-2022-36946 المُبلّغ عنه: دومينغو ديروتيغليانو ونيكولا غيريرا أثناء عملنا على firegex، جدار الحماية الخاص بالتطبيقات لمسابقات هجوم-دفاع CTF، صادفنا بعض حالات تعطل النواة. تم بعد ذلك عزل هذا السلوك الغريب وتحليله، مما أدى إلى اكتشاف هذه الثغرة الأمنية المحتملة في وحدة netfilter، وتحديدًا مع...

CVE-2026-98382

The Linux kernel contains a vulnerability where bound-only BPF programs can incorrectly match sibling ports due to a fallback mechanism in __bpf_offload_dev_match(). Because these programs typically have NULL offdevs , unrelated netdevs can compare as equal on offload-registered netdevs. An attac...

EUVD-2026-95537

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

CVE-2026-98380

A vulnerability exists in the Linux kernel 's net/sched component where tcf_idr_delete_index() fails to properly handle IDR error pointers . Specifically, if an unlocked classifier removes an action and reserves the same IDR slot with ERR_PTR(-EBUSY) between the lookup and deletion, the system tr...

EUVD-2026-95535

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcfactiondelete drops the reference held by its lookup before calling tcfidrdeleteindex with the saved action index. An unlocked classifier can remove that action and...

CVE-2025-39866

CVE-2025-39866 - استخدام بعد التحرير المؤلف: Byte Reaper الوصف يحاول هذا الإثبات استغلال ثغرة CVE-2025-39866، وهي خلل في أنظمة لينكس iwb” and schedules the critical free via “wbputmany”. step 3 : - thread 2 : free wbolb - thread 1 - pointer - free object wb free old - access free address - crash...

CVE-2020-9283

Exploit pour CVE-2020-9283 Ce projet s'inspire du POC original trouvé ici github.com/mark-adams/exploits/CVE-2020-9283. J'étais curieux de savoir comment la bibliothèque SSH Go était implémentée, j'ai donc décidé d'implémenter le PoC en Go. Un court article se trouve ici...

cve-2021-34558

POC لـ CVE-2021-34558 Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client يوجد تعديل طفيف في الملف ./vendor/github.com/refraction-networking/utls/handshakeserver.go لتمكين إرسال المصافحة الخبيثة...

sysctl_coalition_get_pid_list-dos

sysctlcoalitiongetpidlist-dos La fonction sysctlcoalitiongetpidlist dans bsd/kern/syscoalition.c utilise la fonction coalitiongetpidlist pour collecter une liste de PID dans une coalition. Cette fonction retourne le nombre de PID en cas de succès ou un errno négatif en cas d'échec. Cependant, la...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow هو إثبات المفهوم لاستغلال CVE-2016-1827، والذي تم تصحيحه في OS X El Capitan 10.11.5 وiOS 9.3.2. تتمثل الثغرة في سلسلة من العمليات الحسابية غير المدققة على طول غير موثوق يتم توفيره من مساحة المستخدم في الدالة flowdiverthandleappmapcreate. يتطلب...

CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

RowHammer-Exploit

RowHammer-Exploit Exploit basé sur RowHammer backdoor syssuid utilisant rowhammer Encore du travail à faire... comprendre pourquoi ça ne fonctionne pas correctement... Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging request at 0000000100000000 PG...

Centry

Centry ATTENTION : CE LOGICIEL EST EXPÉRIMENTAL. IL EST SUSCEPTIBLE DE CONTENIR DES BOGUES. Mises à jour Si vous avez déjà installé Centry, veuillez exécuter git pull pour mettre à jour vers la dernière version. Les dernières mises à jour le rendent beaucoup plus sûr contre les attaques par rejeu...

cve-2026-23398-poc

Лаборатория: CVE-2026-23398 ICMP / ipnopmtudisc=3 Воспроизводимая лаборатория для бага ядра Linux в icmptagvalidation разыменование NULL, когда net.ipv4.ipnopmtudisc = 3 и приходит ICMP Fragmentation Needed , чей цитируемый внутренний IPv4-заголовок использует номер протокола без обработчика в...

CVE-2026-107325 Application denial of service via missing BSON array length validation in MongoDB Go Driver

Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore.Array.Validate on a malformed four-byte array. An unauthenticated actor who can supply raw BSON array data to an...