CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 - Exécution de code à distance authentifiée. Cette faille exploite le paramètre QoS POST du routeur pour réaliser une exécution de code à distance authentifiée. Ne nécessite pas que QoS soit activé ! root@kitploit: -h, --help show this help message and exit -x ,...

CVE-2026-80630

CVE-2026-80630 affects the Linux kernel fq_codel queueing discipline (net/sched/sch_fq_codel.c). The root cause is an ordering bug: when fq_codel drops packets during a peek operation, it calls qdisc_tree_reduce_backlog before restoring the qlen. If qlen transiently reaches zero while peek still ...

EDRUnChoker

EDRUnChoker Rimedio WMI senza file perEDRChoker contrasta l'abuso QoS pacer.sys che limita la larghezza di banda di rete degli agenti EDR a quasi zero. Registra una sottoscrizione permanente in root\subscription nessun file su disco. Un timer di 5 secondi esegue un VBScript incorporato che enumer...

EDRChoker

EDRChoker EDRChoker utilizza Quality of Service QoS basata su criteri per impostare limiti di banda rigidi throttling sugli agenti di Endpoint Detection and Response EDR, causandone il timeout costante – bloccandoli di fatto. Le regole entrano in vigore immediatamente e persistono dopo il riavvio...

CVE-2024-35106-POC

NEXTU FLETA Wifi6 Router DOS, Möglicher RCE POC Dieses Dokument beschreibt, wie der Exploit am EZNET FLETA WiFI-Router mittels der Schwachstelle CVE-2024-35106 durchgeführt wurde. Schwachstelleninformationen CVE-ID CVE-2024-35106 Hersteller des Produkts NEXTU Produkt FLATA AX1500 Wifi6 Router...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194, where random system crashes have been observed 0. The problem occurs when the split header...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mac80211: Only QoS data frames are tracked for admission control. For admission control, it clearly only applies to QoS data frames. Otherwise, we wouldn’t even be able to access the QoS field in the header. Syzbot reported an...

NanoMQ-Memory-Leak-Research

CVE-2026-36590: Negazione del servizio in EMQ NanoMQ v0.24.9 Questo repository contiene l'advisory pubblico e l'analisi tecnica per CVE-2026-36590, una vulnerabilità di negazione del servizio che colpisce EMQ NanoMQ v0.24.9. Nota di revisione Questo repository è pubblico per fornire un riferiment...

CVE-2026-72297

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking module. This vulnerability occurs due to insufficient validation of traffic classes during Quality of Service QoS setup. A local user can exploit this by providing out-of-range traffic class values, which are then...

Linux Distros Unpatched Vulnerability : CVE-2026-72297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after...

CVE-2026-72297

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

CVE-2026-72297

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

UBUNTU-CVE-2026-72297

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

CVE-2026-72297 net: atm: reject out-of-range traffic classes in QoS validation

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

EUVD-2026-59196

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

CVE-2026-72297

CVE-2026-72297 : Linux kernel vulnerability in ATM QoS validation. The issue arises when QoS is accepted and larger traffic_class values are not rejected, leaving vcc->qos with invalid values. This can lead to an out-of-bounds read in /proc/net/atm/pvc when indexing class_name[] with vcc->q...

CVE-2026-72297 net: atm: reject out-of-range traffic classes in QoS validation

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

Linux Distros Unpatched Vulnerability : CVE-2026-74248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an...

PT-2026-72485

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATM ANYCLASS in check tp. SO ATMQOS stores the supplied QoS after check qos succeeds, so accepting larger values leaves invalid...

DEBIAN-CVE-2026-74248

OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected...