Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-80653

A flaw was found in the Linux kernel's hisisas driver. A local attacker or privileged user could trigger a kernel warning by simultaneously performing a link reset on a remote physical layer PHY device and removing the SAS driver. This race condition can lead to system instability or a denial of...

CVE-2025-44203

CVE-2025-44203: HotelDruid 3.0.0 / 3.0.7 Sensitive Information Disclosure and DoS Summary HotelDruid 3.0.0 and 3.0.7 contain a race condition on the creadb.php setup endpoint, reachable before the setup is finished. It has two impacts, and both come from the same lost race: a sensitive informatio...

CVE-2026-80628

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer OSS Open Sound System emulation. A local user could exploit a data race condition when the sndseqossreadqclear function resets the read queue state without proper locking. This can lead to stale records, dropp...

CVE-2026-80678

A flaw was found in the Linux kernel's i2c: imx driver. A race condition during I2C slave registration and error handling could lead to a NULL pointer dereference. This occurs when the i2cimx-slave pointer is not properly cleared or assigned, especially if power management operations fail or if t...

CVE-2026-80655

A flaw was found in the Linux kernel's zynqmppower driver. A race condition during event registration could allow a local attacker to trigger a system crash. This occurs because certain work structures are registered before they are properly allocated and initialized. If firmware triggers an even...

BIT-TOMCAT-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.42 through...

LGPwn

LGPwn LG Root Exploit Author: [email protected] Special Thanks: Juggie, for pointing out an odd binary in an update spritebud, that lead to me finding this vulnerability. Subject: Race condition in Sprite Software?s backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-36...

CVE-2026-80677

A flaw was found in the Linux kernel driver core. The devhassyncstate function reads the dev-driver pointer multiple times without proper synchronization. This allows a concurrent unbind operation to clear the dev-driver pointer between reads. Such a race condition could lead to a null pointer...

Revenant

CVE-2026-74943 · Use-after-free in Firefox RasterImage surface discard This directory holds an honest reproduction scaffold for a cross-thread use-after-free in mozilla::image::RasterImage::OnSurfaceDiscarded. It is meant to be run against a locally downloaded vulnerable Firefox build using only...

CVE-2026-52885

TOCTOU: проверка HMAC на диске, выполнение из памяти Notepad++ v8.9.6.2 — выполнение управляемых атакующим команд UserCommand через состояние гонки HMAC Уведомление...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation CVE‑2025‑62215에 대한 실습 분석: 실제 환경에서 악용된 Windows 커널 경쟁 조건 취약점. SYSTEM 권한 상승, 탐지 스크립트, 패치 검증 전략을 기업 방어자와 레드팀을 위해 시연합니다. CVE 2025 62215 – Windows 커널 권한 상승 익스플로잇 요약 CVE‑2025‑62215는 인증된 Windows 커널 익스플로잇으로, 메모리 핸들러의 경쟁 조건을 악용해 공격자가...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Escalamiento de Privilegios | Exploit de Kernel Linux 📋 Descripción Laboratorio práctico donde se reproduce la vulnerabilidad DirtyCow CVE-2016-5195, una condición de carrera crítica encontrada en el kernel de Linux que permite a usuarios sin privilegios obtener...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 LLM Safety Research | Responsible Disclosure | AI Alignment Evaluation Researcher : Niranj R Mahaswar Destawell Google AI Vulnerability Reward Program : 889286 — Out of Scope Summary This repository documents a comparative LLM red...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

От первоначального доступа до Domain Admin: применение CVE-2025-54918 в реальном DevOps Симулированная эксплуатация и митигирование CVE-2025-54918 уязвимость Windows NTLM. Включает скрипты обнаружения, Ansible-патчинг и усиление CI/CD. Демонстрирует повышение привилегий от низкоуровневого доступа...

Logitech-G-Cloud-GhostLock-CVE-2026-43499

Logitech G Cloud · Intento de root CVE-2026-43499 GhostLock Logitech G Cloud — Intento de Root CVE-2026-43499 GhostLock ⚠️ Solo con fines de investigación y defensa de seguridad / Solo para fines de investigación y defensa Todo el contenido de este repositorio es generado por DeepSeek AI , solo...

Exploit-Chain-CVE-2025-6018-6019

https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt Este exploit encadena CVE-2025-6018 y CVE-2025-6019 para lograr una escalada de privilegios local desde un usuario no privilegiado a root en sistemas SUSE/openSUSE vulnerables. CVE-2025-6018 es una vulnerabilidad de inyección de variabl...

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll Una vulnerabilidad de Use-After-Free uso después de liberación de alta gravedad que afecta al subsistemaeventpoll del kernel de Linux y que podría permitir la escalada local de privilegios, la corrupción de memoria o la denegación de servicio. 📖 Información general...

MiniPlasma

MiniPlasma Después de reinvestigar la técnica utilizada en GreenPlasma específicamente SetPolicyVal, resulta que cldflt!HsmOsBlockPlaceholderAccess sigue siendo vulnerable al mismo problema que se reportó a Microsoft hace 6 años. No me atribuyo todo el crédito por esto, James Forshaw de Google...