Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nilfs2: The error related to directory read operations from nilfsfindentry is now propagated to the calling functions. Syzbot reported that a task hang occurred in vcsopen during a fuzzing test for nilfs2. The root cause of this...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bonding: Annotate the data races around slave-lastrx. slave-lastrx and slave-targetlastarprx... can be read and written without locking. Add READONCE and WRITEONCE annotations. syzbot reported: BUG: KCSAN: Data race in...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: fixed possible store tearing in neighperiodicwork. While reviewing a related syzbot report involving neighperiodicwork, I noticed that I forgot to add an annotation when deleting an RCU-protected item from a list. When using...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted, malformed file can lead to an out-of-bounds read and type confusion, which may result in code execution. An attacker can provide malicious input to trigger a...

EUVD-2026-92418

LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a document could read a local file into the sheet, or make a request to a host of the document's choosing. In fixed versions...

CVE-2026-22557-check

CVE-2026-22557 Vulnerability Assessment Tool Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-22557 is an unauthenticated path-traversal vulnerability in...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the ibuverbspostsend function. A local user can exploit this vulnerability by providing an invalid work queue element size wqesize from userspace without proper validation. This can lead to an...

EVTX-ATTACK-SAMPLES

Windows EVTX Samples 200 EVTX examples: This is a container for windows events samples associated to specific attack and post-exploitation techniques. Can be useful for: Testing your detection scripts based on EVTX parsing Training on DFIR and threat hunting using event logs Designing detection u...

Security update for pcre2

This update for pcre2 fixes the following issues: CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. CVE-2026-89157: out-of-bounds write via large pattern...

SUSE-SU-2026:4458-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

Security update for sssd

This update for sssd fixes the following issues: CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed bsc1273925. CVE-2026-12610: cancelled or completed PAM request while the asynchronous...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC A bash script for easly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268 Image Magic version effected Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC License:...

CVE-2023-0157

CVE ID : CVE-2023-0157 Vulnerability Type : Directory Traversal Description : The All-In-One Security AIOS plugin for WordPress is vulnerable to directory traversal in versions up to, and including, 5.1.4. This allows authenticated attackers with administrator-level permissions to read the conten...

cve-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read → Admin Token Forge → Sandbox Bypass → RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critical Affected| = 0.211.0 RCE Fixed| 1.121.0 AFR / 1.120.4+ RCE Disclosed| 2026-01-07 11:09 UT...

CVE-2026-105251

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...

azuredevops-enum

ado-enum A command-line tool for enumerating Azure DevOps organisations using a Personal Access Token PAT. It queries the Azure DevOps REST API to surface projects, repositories, service connections, builds, build artefacts, and security settings — useful during authorised security assessments of...

abstractshimmer

ABSTRACT SHIMMER CVE-2020-15257 This repo contains proof-of-concept exploit code for CVE-2020-15257 as described in our blog post. While written for containerd 1.2.x and 1.3.x, it should work on pre-patch versions of containerd 1.4.x. $ go build $ docker build -t abstractshimmer . $ docker run --...