6065 matches found
VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint
VAPT Report on SMB Exploitation in Windows 10 Finance Endpoint This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 EternalBlue on a Windows 10 machine within a finance-oriented infrastructure. 🔐 Introduction...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...
pcileech
PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...
auditpolCIS
auditpolCIS CIS Benchmark testing of Windows SIEM configuration This is an application for testing the configuration of Windows Audit Policy settings against the CIS Benchmark recommended settings. A few points: The tested system was Windows Server 2019, and the benchmark used was also Windows...
lightbulb-framework
LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...
CVE-2026-80867
A flaw was found in the Linux kernel's Alpha/PCI subsystem. A local user could exploit a missing security check in the pcimmapresource function, which allows mapping of PCI Base Address Registers BARs to userspace. This vulnerability could enable a local attacker to perform Direct Memory Access D...
kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
A flaw was found in the Linux kernel's PCI/sysfs legacy I/O and memory handlers. These handlers failed to enforce kernel lockdown, a security mechanism designed to prevent privileged users from performing certain low-level operations. A local root user could exploit this by writing to arbitrary I...
SUSE CVE-2026-43130
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac "iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" relies on pcidevisdisconnected to skip ATS...
SUSE CVE-2026-43161
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU, DPDK can hard-lock the host when their link drops, either by surprise...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fails, the handler and INTx IRQ domain remain set even though the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Initialize ethsyslock spinlock before use lan743xhardwareinit calls pci11x1xstrapgetstatus during the PCI11x1x probe sequence. That helper acquires the Ethernet subsystem hardware lock via lan743xhssyslockacquire,...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled The MPCIFC instruction does not permit registering adapter interrupts without first unregistering them. Therefore, any request to enable interrupt forwarding ...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest attempts to register IRQs without specifying a summary bit, make sure that the associated GAITE then stores 0 for the guest AISB location instead of using...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages The AIBV holds one bit per MSI-X vector for a given function. The size of the bit vector is determined by the NOI and AIBVO. If the size of the AIBV exceeds a sing...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disableidled3 per device When disableidled3 was introduced in vfio-pci, it directly manipulated the device’s power state via pcisetpowerstate. Since there were no refcounts to maintain or any balancing mechanisms,...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate function may return NULL on failure, but the return value is never checked. When it fails, zdev-aibv becomes NULL and causes an error when...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems, the configuration space is too large to be ioremaped all at once; thus, pciecamcreate maps each bus segment separately and relies on the...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Release the VGA arbiter client on registerdevice failure The reordering in the Fixes commit below moved vfiopcivgainit to become the last failure point of what is now vfiopcicoreregisterdevice, without introducing an...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread determines how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not those o...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We encounter a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call...