hacker-scripts

Inglés | 简体中文 Hacker Scripts Basado en una historia real : xxx: Vale, entonces, nuestro ingeniero de builds se ha ido a otra empresa. El tío literalmente vivía dentro del terminal. Ya sabes, ese tipo de persona que ama Vim, crea diagramas en Dot y escribe artículos wiki en Markdown... Si algo —...

rollback_car_attack_proverif

Verifica formale dell'attacco Rollback Prova di concetto in ProVerif dell'attacco Rollback sul keyfob dell'auto CVE-2022-37418, CVE-2022-36945 e CVE-2022-37305, presentata in1 Dichiarazione di non responsabilità Non ho alcun legame con gli autori di 1. Sono loro grato per aver reso il loro artico...

AWS-Tough-Library-Multiple-CVEs

AWS Tough लाइब्रेरी में कई CVE मार्च 2025 में, AWS Labs के Tough लाइब्रेरी TUF – द अपडेट फ्रेमवर्क का Rust क्लाइंट इम्प्लीमेंटेशन में कई सुरक्षा कमजोरियों का खुलासा हुआ। ये मुद्दे CVE-2025-2885, CVE-2025-2886, CVE-2025-2887 और CVE-2025-2888 के अंतर्गत ट्रैक किए गए हैं, और इन्हें Tough संस्करण...

CVE-2025-26125

Descrizione Il programma PoC sfrutta il driver IMFForceDelete che espone un ioctl che consente agli utenti non privilegiati di eliminare file e cartelle. Possiamo trasformarlo in un'escalation dei privilegi utilizzando una tecnica spiegata da ZDI e Halov, che sfrutta il meccanismo di rollback MSI...

CVE-2026-23111

🐧 CVE-2026-23111 - Linux-Kernel nftables Use-After-Free-Schwachstelle ⚠️ Use-After-Free im Linux-Kernel nftables 📖 Übersicht CVE-2026-23111 ist eine hochkritische Use-After-Free UAF -Schwachstelle, die das netfilter/nftables -Subsystem des Linux-Kernels betrifft. Der Fehler entsteht durch eine...

PT-2026-82209

Name of the Vulnerable Software and Affected Versions SENAITE.CORE versions 2.0.0 through 2.6.0 Description An unauthenticated remote code execution issue exists in the SENAITE JSON API due to a chain of missing authorization and unsafe evaluation of input. The state-changing routes in...

K0mraid3s-System-Shell-PREBUILT

K0mraid3s-System-Shell Nel 2019 è stata scoperta una vulnerabilità, poi conosciuta come "CVE-2019-16253", che colpiva il motore TTS di Samsung nelle versioni precedenti alla 3.0.02.7. Questo exploit permetteva a un attaccante locale di elevare i propri privilegi a livello di sistema; in seguito...

CVE-2019-19652

CVE-2019-19652 Attacco di downgrade a Chevereto - 1.0.0 - 1.1.4 Free, = 3.13.5 Core. Un utente admin può istruire lo script di aggiornamento per effettuare un downgrade a un'altra versione invece di un upgrade, reintroducendo vulnerabilità precedenti. A causa della mancanza di un token CSRF, ques...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...

CVE-2026-52134-libiec61850

CVE-2026-52134: gestione del replay GOOSE e della freschezza dei messaggi in libiec61850 v1.6 Stato CVE-2026-52134 è stato assegnato. La pubblicazione del corrispondente record CVE è in sospeso. Prodotto interessato Fornitore: MZ Automation GmbH Prodotto: libiec61850 Versione testata: 1.6 Stato...

CVE-2026-72307

A flaw was found in the Linux kernel's mlxsw driver. When the mlxswspvrslpmtreereplace function encounters an error during Virtual Router VR replacement operations, its rollback mechanism fails to correctly release resources. This leads to a reference count leak, where system resources are not...

CVE-2026-72067

A flaw was found in the Linux kernel's CPU hotplug mechanism. When the cpuhpinvokecallback function attempts to unwind previous operations after a failure, it can incorrectly reuse a return value. This issue allows a successful rollback to mask the original error, causing a failed CPU hotplug...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix missing run load for vcn0 in attrdatagetblocklocked...

CVE-2026-72496

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Proper rollback if the ioremap fails bnxtqpliballocdpi returns success even if ioremap fails. Add the proper rollback when the ioremap fails and return -ENOMEM status...

CVE-2026-72345

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i, so the failed index itself is rolled back. That can operate on uninitialized stat...