BasicHook

BasicHook 32비트 상대 점프를 사용하여 함수를 후킹하며, 쓰기는 경쟁 조건을 피하기 위해 원자적으로 수행됩니다. 명령어 길이 디스어셈블리를 위해 hde32를 사용합니다...

RatRace

RatRace 웹 애플리케이션, API 및 현대 서비스에서 경쟁 상태race condition를 체계적으로 탐지하고 악용하기 위한 경량 CLI 도구입니다. 해결하는 문제 경쟁 상태는 현대 애플리케이션에서 가장 영향력이 큰 보안 취약점 중 하나이지만, 자동화 스캐너로는 거의 탐지되지 않습니다. Nuclei, ffuf, sqlmap과 같은 도구는 정적 취약점을 찾는 데 탁월하지만, 동시성 기반 문제에는 근본적으로 무감각합니다. 오늘날 침투 테스터는 각 작업마다 임시 스크립트를 직접 작성하거나 경쟁 상태 테스트를 완전히 건너뛰어야 ...

CVE-2026-80916

CVE-2026-80916 affects the Linux kernel KCOV subsystem on PREEMPT_RT builds. The root cause is that temporary storage for saving/restoring remote KCOV state was allocated in the per-CPU area ; when a softirq thread preempts a task running a remote KCOV session and is itself preempted by a higher-...

IOHIDFamily-PoC-Research

CVE-2026-28992 — IOHIDFamily FastPathUserClient PoC 보안 연구 저장소입니다. iOS 18.7.1 및 이전 버전에서 IOHIDFamily의 FastPathUserClient의 경쟁 조건을 보여주는 두 가지 PoC 앱입니다. ⚠️ 두 PoC 모두 커널 패닉을 일으키고 기기를 재부팅합니다. 먼저 작업을 저장하세요. 취약점 요약 필드| 세부 내용 ---|--- CVE| CVE-2026-28992 구성 요소| IOHIDFamily — IOHIDEventServiceFastPathUserClient...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in the Linux kernel before version 5.11.7. The function usbipsockfdstore in drivers/usb/usbip/stubdev.c allows attackers to cause a denial of service attack GPF. This vulnerability occurs due to race conditions during the update of the local and shared status,...

Astra Linux – Vulnerability in Intel Microcode

Hardware logic in some Intel processors may contain race conditions, which could allow an authenticated user to potentially enable partial information disclosure through local access...

The vulnerability of the tpacket_snd() function in the net/packet/af_packet.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tpacketsnd function in the net/packet/afpacket.c module of the Linux kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Security update for xen

This update for xen fixes the following issues: CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

NewStart CGSL MAIN 6.06 : gvfs Multiple Vulnerabilities (NS-SA-2026-0060)

The remote NewStart CGSL host, running version MAIN 6.06, has gvfs packages installed that are affected by multiple vulnerabilities: - An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement...

The vulnerability of the `fnhe_remove_oldest()` function in the `net/ipv4/route.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fnheremoveoldest function in the net/ipv4/route.c module of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-62435

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, ...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

RollerCoaster

RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...

CVE-2026-64056

A flaw was found in the Linux kernel's Cortina ethernet driver for Gemini devices. The driver used a single, shared buffer SKB, or Socket Kernel Buffer for assembling incoming network packets across multiple ethernet ports. This shared resource could lead to race conditions, where simultaneous...

CVE-2026-64057

A flaw was found in the Linux kernel's AFS Andrew File System component. This vulnerability involves incorrect locking when processing symbolic links, which can lead to race conditions and memory leaks. These issues could result in resource exhaustion and impact system stability...

CVE-2026-64098 drm/virtio: use uninterruptible resv lock for plane updates

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtiogpucursorplaneupdate and virtiogpuresourceflush lock the framebuffer BO's dmaresv via virtiogpuarraylockresv and ignore its return value. The function can fail wit...

SUSE-SU-2026:22711-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

The vulnerability of the Moby container isolation system creation software lies in synchronization errors when using a common resource, allowing an intruder to read and write arbitrary files.

The vulnerability of the Moby container isolation system creation software is related to synchronization errors when using a common resource “Race Conditions”. Exploiting this vulnerability allows an attacker to read and write arbitrary files...

PYSEC-2026-2340 ajenti.plugin.core has race conditions in 2FA

Impact If the 2FA was activated, it was possible during a short moment after the authentication of an user to bypass its authentication. Patches This is fixed in the version 0.112. Users should upgrade to this version as soon as possible...

PYSEC-2026-1586 Lollms has an Improper Access Control vulnerability

A vulnerability in the lollmsgenerationevents.py component of parisneo/lollms version 5.9.0 allows unauthenticated access to sensitive Socket.IO events. The addevents function registers event handlers such as generatetext, cancelgeneration, generatemsg, and generatemsgfrom without implementing...