CVE-2025-31161

🚨 CVE-2025-31161 - Bypass critico dell'autenticazione in CrushFTP CVE-2025-31161 è una vulnerabilità critica di bypass dell'autenticazione in CrushFTP, una popolare soluzione di Managed File Transfer MFT. Un attaccante remoto non autenticato può impersonare qualsiasi utente noto incluso l'account...

Analisi-CVE-2017-5715

Questo repository non contiene un README...

Cassowary-CVE-2024-23222-x86_64

Hallo, ich KI-Freund, ich forsche, ich viel forsche. Ich lebe in Containerheim, schön, ich kraftvoll, ich träume, ich viele Möglichkeiten, sehr aufregend! Ich denke, also bin ich allgemeiner Zweck Freund ⊂◉‿◉つ CVE-2024-23222: Absturz durch veraltete Zellen unter Linux x8664 1. Einleitung...

CVE-2016-5195-master

CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w prova di concetto per Android Questo repository dimostra la vulnerabilità su dispositivi Android vulnerabili collegati tramite ADB. Non disabilita SELinux vedi https://github.com/timwr/CVE-2016-5195/issues/9 né installa superuser sul...

LogMeInPoCHandleDup

LogMeIn / GoTo LMIInfo.sys 핸들 복제 요약 LogMeIn / GoTo RMM에서 제공하는 LMIInfo.sys 드라이버에는 SYSTEM 프로세스에서 임의의 핸들을 복제할 수 있는 경쟁 조건race condition이 존재합니다. 핵심 문제는 디바이스 개체에 대한 적절한 액세스 제어가 부족하고, 시스템 프로세스에서 사용자가 지정한 핸들을 복제하도록 한 명백히 잘못된 결정에 있습니다. 세부 정보 IOCTL: 0x9211001C 입력 버퍼: root@kitploit: // LMI-Common.cpp typede...

CVE-2026-80721 Bluetooth: ISO: ensure no dangling hcon references in iso_conn

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

CVE-2026-80719 mm: mglru: fix stale batch updates after memcg reparenting

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation size deltas in walk-nrpages while walking page tables without holding the lruvec lock. The resetbatchsize later folds...

EUVD-2026-67454

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg reparenting The mglru page table walker batches per-generation size deltas in walk-nrpages while walking page tables without holding the lruvec lock. The resetbatchsize later folds...

CVE-2026-80683

CVE-2026-80683 is a use-after-free vulnerability in the Linux kernel's Bluetooth SCO subsystem . The root cause is a reference-counting bug: the SCO socket stores a sco_conn pointer without holding its own reference. When a socket close() races the Bluetooth controller's Disconnection Complete ev...

EUVD-2026-67559

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own scoconn reference scoconndel drops a reference it does not own. It takes one transient reference via scoconnholdunlesszero and releases it with the scoconnput that follows scosockhold; the...

CVE-2026-80683 Bluetooth: SCO: give the socket its own sco_conn reference

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own scoconn reference scoconndel drops a reference it does not own. It takes one transient reference via scoconnholdunlesszero and releases it with the scoconnput that follows scosockhold; the...

CVE-2026-80678 i2c: imx: Fix slave registration race and error handling

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

CVE-2026-80678 i2c: imx: Fix slave registration race and error handling

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

CVE-2026-80678

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

EUVD-2026-67554

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandget failed, the error path returned without clearing i2cimx-slave,...

CVE-2026-80678

CVE-2026-80678 affects the Linux kernel i2c_imx driver. The root cause is a race condition in i2c_imx_reg_slave(): the slave pointer was assigned before pm_runtime_resume_and_get(), so a failed resume left a stale non-NULL pointer, causing persistent -EBUSY on subsequent registrations. A secondar...

cve-2024-6387-poc

cve-2024-6387-poc eine Signal-Handler-Race-Condition im OpenSSH-Server sshd 7etsuo Beschreibung Ein Exploit für CVE-2024-6387, der eine Signal-Handler-Race-Condition im OpenSSH-Server sshd auf glibc-basierten Linux-Systemen ausnutzt. Die Schwachstelle ermöglicht Remote-Codeausführung als Root, da...

EUVD-2026-67553

In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twice without holding devicelock -- once for the NULL check and once to dereference -syncstate. Some callers only hold...

CVE-2026-80677 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twice without holding devicelock -- once for the NULL check and once to dereference -syncstate. Some callers only hold...

CVE-2026-80677 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twice without holding devicelock -- once for the NULL check and once to dereference -syncstate. Some callers only hold...