android_kernel_xiaomi_sunny

Linux 内核 本文件已移至 Documentation/admin-guide/README.rst 请注意，内核开发者和用户有多份指南可供参考。 这些指南可以渲染为多种格式，例如 HTML 和 PDF。 要构建文档，请使用 make htmldocs 或 make pdfdocs。 Documentation/ 子目录中包含各种文本文件， 其中一部分使用了 Restructured Text 标记语法。 请参阅 Documentation/00-INDEX 了解每个文件中包含的内容。 请阅读 Documentation/process/changes.rst 文件，该文件包含...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB 쓰기 → FSOP → 임의 코드 실행 대상: GNU Binutils HEAD를 포함한 모든 버전 — objdump 환경: Debian 13 Trixie, glibc 2.41, x8664 영향: 임의 코드 실행 벡터: objdump -g로 처리되는 조작된 ELF 파일 ASLR: 우회됨 결정적 mmap 델타 감사의 말 이 발견에 대해 언급해 주고 공정하게 대해 준 bikini 에게 크게 감사드립니다. 그는 정말 좋은 사람이며, 그와 대화할 수 있어 즐거웠습니다. 그 역시 훌륭한 발견...

exploitdb

New repo can be found here: https://gitlab.com/exploit-database/exploitdb...

CVE-2017-11882

CVE-2017-11882 CVE-2017-11882의 Empire 포트 코드가 다른 상위 저장소로 이동되었습니다. 리디렉션?...

CVE-2026-93800

A flaw was found in the Linux kernel's Btrfs file system. A local user could cause a Denial of Service DoS or memory corruption due to improper error handling during subvolume relocation. If a failure occurs while updating relocation data, the kernel can leave an invalid reference pointing to...

CVE-2026-93798

A flaw was found in the Linux kernel's Btrfs file system. A local user could exploit this flaw to cause a Denial of Service DoS by triggering system instability or a kernel crash. This issue is caused by missing memory barriers and improper state flag management during relocation root cleanup,...

Linux Distros Unpatched Vulnerability : CVE-2026-81885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because...

SUSE CVE-2026-81885

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...

CVE-2026-81885

A flaw was found in radare2, a reverse engineering framework. By opening a specially crafted NE executable file, an attacker could trigger an an infinite loop within the application's relocation parser. This continuous processing would consume excessive CPU and memory, leading to a denial of...

CVE-2026-83803

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

CVE-2026-83803

The error tracking and performance monitoring tool Sentry versions 23.11.0 until 26.7.0 is vulnerable to arbitrary code execution. When the relocation feature is enabled, the application unsafely deserializes a legacy database field during the import of a user-supplied relocation archive. An auth...

CVE-2026-83803 Sentry: Unsafe pickle deserialization in Relocation Feature

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

CVE-2026-83803 Sentry: Unsafe pickle deserialization in Relocation Feature

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

EUVD-2026-84552

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

CVE-2026-83803 Sentry: Unsafe pickle deserialization in Relocation Feature

Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes...

CVE-2026-81885

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...

UBUNTU-CVE-2026-81885

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...

CVE-2026-81885 radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...

CVE-2026-81885

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...

CVE-2026-81885 radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...