CVE-2026-89605

A flaw was found in the ecryptfs component of the Linux kernel. When the ecryptfssendmiscdev function fails to send a message to the userspace daemon, the associated message context is not properly released. This oversight leaves the context on an allocated list, preventing its reuse. Repeated...

CVE-2026-89565

A flaw was found in the Linux kernel's IP over IP ipip tunnel driver. When operating in collectmd mode, the ipiptunnelrcv function fails to free a network packet buffer skb if the metadatadst allocation fails. This oversight leads to a memory leak. A local attacker could potentially exploit this...

CVE-2026-89485

A flaw was found in the lockd component of the Linux kernel. This use-after-free vulnerability occurs in the nlmtraversefiles function when a file's memory is prematurely released while an iterator still holds a pointer to it. A remote attacker could potentially exploit this to cause system...

CVE-2026-89447

A flaw was found in the Linux kernel's iommufd subsystem. A local attacker could exploit a vulnerability where an object reference is leaked during the unmapping of internal accesses. This occurs because the iommufdaccessnotifyunmap function incorrectly locks an object before checking if the acce...

CVE-2026-89678

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd component. The nfsddirectwrite function, responsible for handling direct writes, incorrectly detects partial writes. This issue occurs because the logic for detecting short writes compares the actual bytes written against ...

CVE-2026-89768

A flaw was found in the Linux kernel's filesystem fs component. When using nested overlay filesystems overlayfs, a local user could exploit an issue where the backingfileopen function incorrectly derives the path for mapped files. This vulnerability leads to information disclosure, as files mappe...

Bin-Finder

Descripción Esta herramienta busca los procesos que tienen cargado un binario concreto o los procesos que no lo tienen. Esto es útil en los siguientes escenarios: Permite detectar procesos en los que un dll específico de EDR/AV no está cargado. Esto podría llevar a la detección de excepciones del...

CVE-2026-89719

A flaw was found in the Linux kernel's zram module. This vulnerability occurs when the readblockstate function calculates the number of pages before acquiring a device lock. If the zram device is reset and reinitialized with a smaller disk size, the function can attempt to access memory beyond th...

CVE-2026-89521

A flaw was found in the Linux kernel's core scheduling component. This issue occurs when the picktask function releases the run queue rq lock, allowing an interleaving selection to invalidate the scheduler's internal state. This inconsistency can lead to incorrect task selection and skewed resour...

CVE-2026-89545

A flaw was found in the Linux kernel. This vulnerability exists within the sunrpc component, where memory associated with rqargp and rqresp is freed prematurely. Specifically, the svcrqstfree function frees these structures synchronously, while the main request structure rqstp is freed later via...

CVE-2026-81000

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

dpapi-ng

dpaping - Biblioteca de des-/cifrado DPAPI-NG para Python Biblioteca para el des-/cifrado de DPAPI NG, también conocido como CNG DPAPI, en Python. Está diseñada para replicar el comportamiento de NCryptUnprotectSecret y NCryptProtectSecret. Puede utilizarse en hosts que no sean Windows para...

cynative v1.11.3

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

effective-waffle

effective-waffle otra cosa de cifrado de sleep. también usé el nombre de repositorio predeterminado de GitHub para este. TpAllocWork + TpPostWork + TpWaitForWork + TpReleaseWork para crear + ejecutar + limpiar el callback. El callback es un ensamblado chapucero que pone en cola un montón de gadge...

BLACKHAT_Asia2023

BLACKHATAsia2023 Solo acerca de PDF público de BLACKHAT USA2022 Lista de archivos, busca lo que te interese. root@kitploit: BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf...

PPLFaultDumpBOF

Esta es una obra derivada de https://github.com/gabriellandau/PPLFault. Consulte ese repositorio para toda la investigación original e información adicional Esta conversión no modifica deliberadamente los IOC de la versión original de la herramienta. PPLFaultDumpBOF Toma el PPLFault original y el...

Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

GHSA-2CG9-97GQ-9MQP Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

CVE-2026-89756

A flaw was found in the Linux kernel. When performing memory migration on KVM Kernel-based Virtual Machine hosts, the migratepagesbatch function fails to report RCU Read-Copy Update tasks quiescent states during large batch unmapping operations. This oversight causes the migrating task to become ...

CVE-2026-89742

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability in the dmareqfree function within the RapidIO mport character device interface. This flaw occurs when the dmareqfree function attempts to dereference a freed object after dropping the last reference to...