paperweight

Paperweight 웹사이트 Paperweight의 마케팅 사이트입니다. 개발 저장소 루트에서 의존성을 설치한 후 이 패키지에서 Next.js를 실행하세요: root@kitploit: pnpm -C website install pnpm -C website dev 프로덕션 빌드 root@kitploit: pnpm -C website build pnpm -C website start 환경 변수 이 사이트에는 두 개의 서버 측 API 라우트가 있습니다: POST /api/newsletter Resend를 통한 뉴스레터 가입 POS...

CVE-2026-11117-WPA2-4-Way-Handshake-Reinstallation-KRACK-Sim-

CVE-2026-11117 – WPA2 四次握手密钥重装（KRACK 模拟） 程序代码（Python） root@kitploit: kracksim.py - Simulates reinstallation of an already-used PTK import hashlib, os class AccessPoint: def initself: self.anonce = os.urandom32 self.ptk = None def sendmsg3self, snonce: Normally would install PTK, but here we resen...

cve-2026-5950-bind9-resolver-dos

CVE-2026-5950 - BIND 9 リゾルバ DoS CVE-2026-5950 に関する調査ノートと防御ガイダンス。BIND 9 リゾルバのステートマシンにおける無制限の再送ループ脆弱性です。 概要 CVE-2026-5950 は、再帰的な BIND 9 リゾルバに影響します。特定のリトライおよび不良サーバー処理条件下で、リモートの認証されていない攻撃者が繰り返し再送信動作を引き起こし、深刻なリソース枯渇を引き起こす可能性があります。 このリポジトリは意図的に防御的な目的に限定しています。エクスプロイトペイロードや運用上の攻撃手順は公開していません。 主要情報 フィールド| ...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: x86/i8259: The legacy PIC interrupts have been marked with IRQLEVEL. Baoquan reported that after triggering a crash, the subsequent boot process fails about half of the time. This occurs due to a NULL pointer dereference in the...

SUSE CVE-2026-80860

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

CVE-2026-80860

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

EUVD-2026-71310

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

CVE-2026-80860 fuse: fix race between interrupt and resend

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

CVE-2026-80860

CVE-2026-80860 is a race condition in the Linux kernel FUSE (Filesystem in Userspace) subsystem. After commit f8fce75fedf7, a race between interrupt and resend paths causes WARN_ON(!list_empty(&req->intr_entry)) to trigger in fuse_request_free(). Specifically, request_wait_answer() reads the F...

CVE-2026-80860 fuse: fix race between interrupt and resend

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intrentry in fuseresend and fuseremovependingreq" the WARNON!listempty&req-intrentry in fuserequestfree still triggers due to the following race: ...

PT-2026-85738

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After commit f8fce75fedf7 "fuse: clear intr entry in fuse resend and fuse remove pending req" the WARN ON!list empty&req-intr entry in fuse request free still triggers due to the...

Linux Distros Unpatched Vulnerability : CVE-2026-80860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: fix race between interrupt and resend After commit f8fce75fedf7 fuse: clear intrentry in fuseresend and fuseremovependingreq the...

CVE-2026-77134: Incorrect Authorization

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval...

CVE-2026-45127 MyBB: ACP Mass Mail draft resend CSRF

MyBB is free and open source forum software. Prior to 1.8.40, the ACP Mass Mail module does not validate certain requests correctly, allowing same-site attackers to create draft entries from archived entries by embedding a specially crafted URL. The Resend route in Admin CP, Users & Groups, Mass...

CVE-2026-45127 MyBB: ACP Mass Mail draft resend CSRF

MyBB is free and open source forum software. Prior to 1.8.40, the ACP Mass Mail module does not validate certain requests correctly, allowing same-site attackers to create draft entries from archived entries by embedding a specially crafted URL. The Resend route in Admin CP, Users & Groups, Mass...

CVE-2026-64265 fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...

CVE-2026-64265

The CVE-2026-64265 issue affects the Linux kernel fuse subsystem. When fuse_resend() moves a request from fpq->processing back to fiq->pending, it marks FR_PENDING and clears FR_SENT but fails to remove the request’s intr_entry from fiq->interrupts. If FR_INTERRUPTED was set previously, ...

EUVD-2026-48977

In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...

SUSE-SU-2026:2673-1 Security update for bind

This update for bind fixes the following issues: Security issues: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation bsc1265591. - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records bsc1265592. - CVE-2026-3593: Heap use-after-free vulnerabilit...

SUSE SLES15 Security Update : bind (SUSE-SU-2026:2676-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2676-1 advisory. This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation...