qrv

QRV — a QNX Neutrino-based operating system, re-imagined for 64-bit RISC-V QRV is a ground-up adaptation and re-implementation of the QNX Neutrino 6.4 operating system for modern 64-bit hardware, with RISC-V rv64g as the primary architecture and x86-64 as a secondary target. The project started o...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2026-50077

Vulnerabilities in the QNX Virtual Machine (QVM) affect the QNX Hypervisor and QNX Hypervisor for Safety . An Invalid Memory Access via the MSI-X table in QVM could allow an attacker residing in the guest to execute arbitrary code within the QVM. This could lead to memory corruption , information...

CVE-2026-50078

The QNX Virtual Machine (QVM) , utilized in QNX Hypervisor and QNX Hypervisor for Safety , contains an Out-Of-Bounds Read vulnerability in the MSI-X table . This flaw could allow an attacker residing in a guest environment to trigger an information disclosure or cause a crash of the QVM. No speci...

CVE-2026-50079

A Time-of-check Time-of-use (TOCTOU) Race Condition exists in the virtio network virtual device within the QNX Virtual Machine (QVM) . This vulnerability affects QNX Hypervisor and QNX Hypervisor for Safety . An attacker operating within the guest environment could manipulate the virtual network ...

CVE-2026-40274

Invalid Pointer Reference in the TimerSettime system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel...

CVE-2026-40275

Heap-based Buffer Overflow in the DCMDPROCEVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel...

CVE-2026-40273

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel...

CVE-2026-50080

A Stack-based Buffer Overflow exists in the ACPI event handler of the QNX Virtual Machine (QVM) , affecting QNX Hypervisor and QNX Hypervisor for Safety . An attacker residing in a guest environment could crash the QVM by transmitting a crafted ACPI request . The vulnerability is associated with ...

CVE-2026-40273

The QNX Neutrino kernel , used in the QNX Software Development Platform and QNX OS for Safety, is vulnerable to an improper input validation flaw in a procnto message handler . An attacker with local access could send a crafted message to trigger an information disclosure . No specific remediatio...

EUVD-2026-122692

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel...

CVE-2026-40274

The QNX Neutrino kernel is vulnerable to an Invalid Pointer Reference within the TimerSettime() system call. This vulnerability allows an attacker with local access to arm a crafted timer event, potentially leading to an information disclosure . The affected software includes the QNX Software Dev...

EUVD-2026-122691

Invalid Pointer Reference in the TimerSettime system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel...

EUVD-2026-122799

Heap-based Buffer Overflow in the DCMDPROCEVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel...

CVE-2026-40275

A Heap-based Buffer Overflow exists in the DCMD_PROC_EVENT handler of the procnto within the QNX Neutrino kernel . This vulnerability affects the QNX Software Development Platform and QNX OS for Safety . An attacker with local access could exploit this flaw to trigger an information disclosure , ...

CVE-2026-54436

A Heap-based Buffer Overflow exists in the io-char library 's DCMD_CHR_WAITINFO devctl() handler within the QNX Software Development Platform . This vulnerability could allow a local attacker to cause data tampering, a system crash, or achieve arbitrary code execution in the Character I/O device ...

PT-2026-144430

Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted message which can cause an information disclosure in the QNX Neutrino kernel...

PT-2026-144415

Heap-based Buffer Overflow in the DCMD PROC EVENT handler of the procnto could allow an attacker with local access to cause an information disclosure, data tampering or a crash of the QNX Neutrino kernel...

PT-2026-144431

Invalid Pointer Reference in the TimerSettime system call could allow an attacker with local access to arm a crafted timer event which can cause an information disclosure in the QNX Neutrino kernel...

Linux Distros Unpatched Vulnerability : CVE-2026-106589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related...