Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

Python-Shellcode-Anydesk-Apc-injection-Remote-IP-Address-Analysis

1.x64dbg – File Operations & JMP Trampolines This x64dbg view reveals that the Python shellcode uses file operations CreateFileW, DeleteFileA/W and JMP trampolines to dynamically call Windows APIs. Key Observations: CreateFileW – Creates or opens a file payload drop. DeleteFileA / DeleteFileW –...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...

Linux Distros Unpatched Vulnerability : CVE-2026-98624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfnetlinkqueue: hold nfnl mutex in event notifier We must serialize the release notifier and the config netlink function. A concurrent thread can iss...

Linux Distros Unpatched Vulnerability : CVE-2026-98659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2025-38584)

In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start of the process in padatadoparallel, and released at the end in...

FreeRDP RDP DoS

The vulnerability of the winprconvertfromjpeg function in the RDP client FreeRDP is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux mlx5_ib_reg_user_mr Heap Buffer Overflow DoS

The vulnerability of the mlx5ibregusermr function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the geminitone function in the drivers/net/ethernet/sun/sungem.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the aspeedtachvaltorpm function in the drivers/hwmon/aspeed-g6-pwm-tach.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix bounds check for skb-backed dynptrs The skbpointeriflinear function checks whether a memory region of length len starting at offset off into the skb is...

Linux kernel SFP I2C Buffer Overflow DoS

The vulnerability of the sfpi2cmdiobuscreate function in the Linux kernel’s drivers/net/phy/sfp.c module is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel xfrm_input_state_lookup Buffer Overflow

The vulnerability of the xfrminputstatelookup function in the net/xfrm/xfrmstate.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

Linux fs/ocfs2/aops.c Heap Buffer Overflow DoS

The vulnerability of the ocfs2dioendiowrite function in the fs/ocfs2/aops.c component of the Linux kernel is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the iceresetallvfs function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources wh...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53325)

In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agpamd64probe A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g. qemu/kvm without a physical AMD northbridge. The crash occurs...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53263)

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in lowpaniphcmcastctxaddrcompress uses &data1 as destination and &ipaddr-s6addr11 as source, but both should be offset by one: &data2 and...

Wireshark 1.12.x < 1.12.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.2 advisory. - The dissectwritestructuredfield function in epan/dissectors/packet-tn5250.c in the TN5250 dissector i...