367 matches found
microctfs
microctfs Small CTF challenges running on Docker logviewer Build and Start logviewer challenge exposed on port 8000 root@kitploit: cd logviewer docker build -t logviewer . docker run -d -p 8000:80 --name logchallenge logviewer Restart logviewer challenge root@kitploit: docker rm -f logchallenge &...
c2-printf
C2-PRINTF es una pequeña utilidad que le permite realizar depuración al estilo printf a través de una conexión del depurador C2, para usar con los microcontroladores Silicon Labs EFM8 y C8051F. Artículo completo disponible en mi blog:...
atlas-tj-actions-poc
CVE-2025-54416: PoC de inyección de comandos en tj-actions/branch-names Este repositorio demuestra CVE-2025-54416 , una vulnerabilidad crítica de inyección de comandos en tj-actions/branch-names que afecta a más de 5,000 repositorios públicos. Vulnerabilidad La GitHub Action tj-actions/branch-nam...
PUB-A-511318880
In printf of printf.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move the cfglogverbose check before calling lpfcdmpdbg In an attempt to log message 0126 using LOGTRACEEVENT, the following hard lockup occurred, causing the system to hang. Call Trace: rawspinlockirqsave+0x32/0x40...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...
SUSE-SU-2026:3613-1 Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: - Fixbase: sanitize message...
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: Fixbase: sanitize message...
SUSE SLES15 Security Update : dracut (SUSE-SU-2026:3599-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3599-1 advisory. This update for dracut fixes the following issue: Update to version 055+suse.367.g85633e8. Securitys issue fixed: - CVE-2026-15816: root cod...
CLSA-2026-1774311624 TuxCare security update for printf (3 CVEs)
TuxCare rebuilt printf to address 3 CVEs. Fixed in 0.5.3-tuxcare.1...
CLSA-2026-1772669616 TuxCare security update for printf (2 CVEs)
TuxCare rebuilt printf to address 2 CVEs. Fixed in 0.2.5-tuxcare.1...
UBUNTU-CVE-2026-64252
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has...
CVE-2026-64252
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has...
CVE-2026-64252
CVE-2026-64252 - Linux kernel MIPS XKPHYS console buffer truncation : In 64-bit configurations, the initial console output path could place the firmware’s buffer for printf() into the XKPHYS memory segment via the initial kernel thread, causing truncation to a 32-bit address when firmware runs, p...
GHSA-VCRW-4XVV-JH49 MantisBT: Reflected XSS in admin/install.php via unescaped printf
MantisBT 2.28.3 and earlier contains six reflected XSS injection points in /admin/install.php. User-supplied parameters are echoed into HTML without escaping via an unescaped printf format string. No authentication is required. A Content Security Policy script-src 'self' prevents inline JavaScrip...
CVE-2026-6643
A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf and passing user-controlled data directly to printf. Due to the lack of PIE and Stack Canary protections, an authenticated remote attacker can exploit these to...
SUSE CVE-2026-6843
A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...
EUVD-2026-24708
A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...
CVE-2026-6843
A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...
CVE-2026-6843 Nano: nano: format string vulnerability leads to denial of service
A flaw was found in nano. A local user could exploit a format string vulnerability in the statusline function. By creating a directory with a name containing printf specifiers, the application attempts to display this name, leading to a segmentation fault SEGV. This results in a Denial of Service...