EUVD-2026-67484

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-80608

This Linux kernel vulnerability affects the accel/amdxdna driver (AMD XDNA accelerator). When force_iova mode is enabled, a race condition exists during device removal: amdxdna_remove() frees the xdna->domain IOMMU domain, and a subsequent call to amdxdna_gem_obj_free() may access that freed m...

ghostrace

GhostRace: स्पेक्युलेटिव रेस कंडीशन्स का दोहन और शमन इस रिपॉजिटरी में शामिल हैं: एक न्यूनतम PoC जो स्पेक्युलेटिव रेस कंडीशन की अवधारणा को चरण-दर-चरण सिंगल-थ्रेडेड तरीके से प्रदर्शित करता है। Linux कर्नेल v5.15.83 को स्पेक्युलेटिव कंकरंट यूज़-आफ्टर-फ्री SCUAF गैजेट्स के लिए स्कैन करने हेतु उपयोग क...

mindmanager-poc

mindmanager-poc Betroffene Anwendung: MindManager23setup.exe Plattform: Windows Problem: Lokale Privilegienerweiterung über den Reparaturmodus des MSI-Installers EXE-Hijacking-Race-Condition Entdeckt und gemeldet von: Pawel Karwowski und Julian Horoszkiewicz Eviden Red Team Vorgeschlagene...

symboliclink-testing-tools

symboliclink-testing-tools c Google Inc. 2015 Sviluppato da James Forshaw Questa è una piccola suite di strumenti per testare vari tipi di collegamenti simbolici di Windows. È composta dai seguenti strumenti: BaitAndSwitch : Crea un collegamento simbolico e usa un OPLOCK per vincere una TOCTOU...

Linux Distros Unpatched Vulnerability : CVE-2026-80653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following ...

Linux Distros Unpatched Vulnerability : CVE-2026-80668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already...

PT-2026-82977

In the Linux kernel, the following vulnerability has been resolved: driver core: use READ ONCE for dev-driver in dev has sync state dev has sync state reads dev-driver twice without holding device lock -- once for the NULL check and once to dereference -sync state. Some callers only hold device...

Linux Distros Unpatched Vulnerability : CVE-2026-80678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandge...

Linux Distros Unpatched Vulnerability : CVE-2026-80628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and produce...

Linux Distros Unpatched Vulnerability : CVE-2026-80655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - soc: xilinx: Fix race condition in event registration The zynqmppower driver registers handlers for suspend and subsystem restart events using registerevent...

PT-2026-83369

Name of the Vulnerable Software and Affected Versions free5GC versions 1.4.4 and earlier Description The AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool within internal/context/context.go, using only the SUPI as a key. Requests processed by...

openSUSE 16 Security Update : rsync (openSUSE-SU-2026:21650-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21650-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon...

requests-racer

Requests-Racer Requests-Racer è una piccola libreria Python che ti consente di utilizzare la libreria Requests per inviare più richieste che verranno elaborate dai rispettivi server di destinazione approssimativamente nello stesso momento, anche se le richieste hanno destinazioni diverse o payloa...

DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221

Analisi Tecnica e Prova di Concetto: Incoerenza di Memoria Temporale in cldflt.sys CVE-2025-62221 DIMOSTRAZIONE Prova di Concetto: Incoerenza di Memoria Temporale in cldflt.sys CVE-2025-62221 CVE-2025-62221: Questo repository fornisce un'analisi tecnica completa e una dimostrazione Proof-of-Conce...

CVE-2026-59321

Spring Integration versions 7.1.0 , 7.0.0–7.0.5 , 6.5.0–6.5.10 , 6.4.0–6.4.12 , and 5.5.21 and earlier are affected by a thread-safety flaw in script-backed channels. A single JSR-223 ScriptEngine instance is shared across all messages without verifying the engine's THREADING capability. When a n...

CVE-2026-59321 Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check

A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null not thread-safe, e.g. the Kotlin kts engine, concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

CVE-2026-80548

A flaw was found in the Linux kernel's s390/vfioccw component. The iomutex was not sufficiently expanded to serialize I/O operations, which could lead to race conditions. These race conditions could result in unexpected system behavior or instability...

CVE-2026-80556

A flaw was found in the Linux kernel's atmel-mci component. A race condition during the removal of the atmel-mci module can lead to a use-after-free vulnerability. This occurs when work items related to the module are still pending or running after the associated memory has been freed. This flaw...