webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

FakeDns

FakeDns 업데이트 4/14/2020 - Python 2 지원이 제거되고 코드가 Python3로 전환되었습니다. 이제 라운드로빈 및 개선된 옵션을 제공합니다! 버그: @crypt0s - 트위터 [email protected] - 이메일 파이썬 정규 표현식 기반 DNS 서버입니다! USAGE: ./fakedns.py -h -c Config path -i interface IP address --rebind dns.conf는 다음과 같이 설정해야 합니다: RECORD TYPE CODE python regular...

dns-rebind-toolkit

DNS Rebind Toolkit 데모 | 보안 권고 | 포함된 페이로드 | FAQ 면책 조항: 이 소프트웨어는 교육 목적으로만 제공됩니다. 이 소프트웨어는 불법 활동에 사용되어서는 안 됩니다. 저자는 그 사용에 대해 책임을 지지 않습니다. 나쁜 짓 하지 마세요. DNS Rebind Toolkit은 로컬 영역 네트워크LAN의 취약한 호스트와 서비스를 대상으로 하는 DNS 리바인딩 익스플로잇을 개발하기 위한 프론트엔드 자바스크립트 프레임워크입니다. Google Home, Roku, Sonos WiFi 스피커, WiFi 라우터,...

EXPLOIT-CVE-2026-42559

CVE-2026-42559 — rmcp Streamable HTTP 서버 전송의 DNS 리바인딩 CVE-2026-42559GHSA-89vp-x53w-74fx / RUSTSEC-2026-0189을 위한 독립형 Docker 랩 및 Python 개념 증명PoC입니다. | ---|--- 영향 범위| rmcp — Model Context Protocol용 공식 Rust SDK — 1.4.0 수정 버전| 1.4.0 2026-04-10 CWE| CWE-346 출처 검증 오류, CWE-350 CVSS 3.1| 8.8 High —...

Linux Distros Unpatched Vulnerability : CVE-2026-90295

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: imx6q: fix out-of-bounds write when probed more than once imx6socvolt is allocated fresh on every probe, sized to the number of ARM OPPs: imx6socvolt ...

CVE-2026-90295 cpufreq: imx6q: fix out-of-bounds write when probed more than once

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix out-of-bounds write when probed more than once imx6socvolt is allocated fresh on every probe, sized to the number of ARM OPPs: imx6socvolt = devmkcalloccpudev, num, sizeofimx6socvolt, GFPKERNEL; but it is fill...

CVE-2026-90296 cpufreq: imx6q: fix devres accumulation across driver rebind

In the Linux kernel, the following vulnerability has been resolved: cpufreq: imx6q: fix devres accumulation across driver rebind imx6socvolt is allocated with devmkcalloccpudev, ..., where cpudev is the CPU device from getcpudevice0. That device is never unbound, so its devres list is never...

CVE-2026-90295

CVE-2026-90295 affects the Linux kernel cpufreq driver for i.MX6 (imx6q). The root cause is that soc_opp_count has static storage and is never reset between driver probe cycles. On a second bind after an unbind, imx6_soc_volt is freshly re-allocated (sized to the current number of ARM OPPs), but ...

CVE-2026-90296

CVE-2026-90296 affects the Linux kernel's cpufreq/imx6q driver. The root cause is a devres allocation leak : imx6_soc_volt was allocated via devm_kcalloc() against the CPU device (get_cpu_device(0)), which is never unbound, so its devres list is never freed. Each driver rebind (probe) therefore a...

kernel: drm/xe: always keep track of remap prev/next

A flaw was found in the Linux kernel's drm/xe driver. During 3D workload processing, a user process can trigger an issue in the Virtual Memory Area VMA management when performing a rebind operation. This can lead to an invalid or overlapping VMA insertion, causing the system to enter an unstable...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mm/mempolicy: fixed an issue where uninit-value was present in mpolrebindpolicy. mpolsetnodemask mm/mempolicy.c does not set the nodemask when pol-mode is MPOLLOCAL. Check pol-mode before accessing pol-w.cpusetmemsallowed in...

kernel: drm/xe: always keep track of remap prev/next

A flaw was found in the Linux kernel's drm/xe driver. During 3D workload processing, a user process can trigger an issue in the Virtual Memory Area VMA management when performing a rebind operation. This can lead to an invalid or overlapping VMA insertion, causing the system to enter an unstable...

Linux Distros Unpatched Vulnerability : CVE-2026-89635

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbdreopendurablefd...

Linux Distros Unpatched Vulnerability : CVE-2026-89520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared...

AZL-100676 CVE-2026-89520 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared core-wide lock. A -picktask that releases the rq lock leaves every...

CVE-2026-89520

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's picknexttask operates on all sibling rqs under one acquisition of the shared core-wide lock. A -picktask that releases the rq lock leaves every...

UBUNTU-CVE-2026-89635

In the Linux kernel, the following vulnerability has been resolved: ksmbd: only rebind the reopened file's own oplock on durable reconnect ksmbdreopendurablefd walks the inode's moplist and rebinds every detached oplock to the reconnecting session: listforeachentryrcuop, &ci-moplist, opentry,...

PT-2026-90351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the ksmbd reopen durable fd function incorrectly rebinds all detached oplocks on an inode to a reconnecting session instead of only the oplock...

CVE-2026-86076 n8n: Expression Sandbox Escape in Editor-UI Enables Stored Cross-User JavaScript Execution

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the expression compiler sanitizer resolved through dynamically scoped this and did not reject reserved class member names. A class field named sanitize could rebind the sanitizer and reach the Function...

CVE-2026-71403 Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind

A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's username and principalIds fields. A user holding the update verb on users.management.cattle.io could inject a foreign identity provider principal into any account, so that the next log...