Lucene search
+L

109 matches found

Kitploit
Kitploit
•added 2026/10/28 8:27 a.m.•32 views

byvalver

byvalver ·𐑚𐑲𐑝𐑨𐑤𐑝𐑼 THE SHELLCODE BAD-BYTE BANISHER Overview • Quick Start • Interactive TUI • Targeted Bad-Byte Elimination • Bad-Byte Profiles • Features • Architecture • System Requirements • Dependencies • Building • Installation • Usage • Obfuscation Strategies • Denullification Strategies • M...

6.3AI score
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/10/24 12:00 a.m.•2 views

Combinatorial Lock for Trojan-Resilient AI Engines Via Hash-Assisted Spectral Filtering

Multi-trigger backdoor attacks, in which heterogeneous trigger mechanisms e.g., patch, blend, warping, and the latent-domain Spy-Watermark coexist within a single poisoned model, cannot be addressed by existing shortcut-based defenses that assume a single, static attack mechanism. Current...

5.9AI score
SaveExploits0
EUVD
EUVD
•added 2026/09/25 10:22 a.m.•17 views

EUVD-2026-86898

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with PAES algorithm In function ctrpaesdocrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of unwanted...

6.2AI score0.00198EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/09/25 12:00 a.m.•16 views

CVE-2026-97592

In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes AESBLOCKSIZE. This buffer was not scrubbed and thus could lead to expose of...

6.1AI score0.0021EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-97592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm In function ctraescrypt there is a buffer used to process remaining bytes...

6.2AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/11 12:00 a.m.•24 views

Xen: Stale TLB Entry Ahead of Page Scrubbing (XSA-511)

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/08 1:17 p.m.•17 views

CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

4.3CVSS0.00222EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/08 12:11 p.m.•48 views

CVE-2026-79603

The Xen hypervisor is vulnerable to a flaw where x86 paravirtualized (PV) guests can free memory pages while a stale Translation Lookaside Buffer (TLB) entry still points to them. Because Xen only issues a TLB flush when a page is reused, a window exists where a PV guest can modify an already scr...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/08 12:11 p.m.•18 views

EUVD-2026-72721

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/08 12:11 p.m.•16 views

CVE-2026-79603 Unconditionally do TLB flushing ahead of page scrubbing

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

5.8AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 12:11 p.m.•44 views

CVE-2026-79603 Unconditionally do TLB flushing ahead of page scrubbing

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

0.00222EPSS
SaveExploits0References1
Xen Project
Xen Project
•added 2026/09/08 12:00 p.m.•33 views

Unconditionally do TLB flushing ahead of page scrubbing

ISSUE DESCRIPTION x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify ...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-79603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used...

4.3CVSS6AI score0.00222EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/04 4:17 p.m.•20 views

CVE-2026-19300

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

7.5CVSS0.00515EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 3:47 p.m.•47 views

CVE-2026-19300

IBM Langflow OSS versions 1.0.0 through 1.11.2 are affected by an information disclosure vulnerability in the unauthenticated public flow endpoint. The endpoint uses a heuristic denylist to scrub stored secrets from node templates, but omits fields such as Authentication, X-Session-Id, App-Key, a...

7.5CVSS6AI score0.00515EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/04 3:47 p.m.•15 views

EUVD-2026-71271

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

7.5CVSS6AI score0.00515EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 3:47 p.m.•21 views

CVE-2026-19300 Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

7.5CVSS6AI score0.00515EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/04 3:47 p.m.•9 views

CVE-2026-19300

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

8.7CVSS6AI score0.00515EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 3:47 p.m.•52 views

CVE-2026-19300 Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

7.5CVSS0.00515EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•27 views

PT-2026-85670

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incomplete scrubbing of sensitive credential fields...

7.5CVSS6AI score0.00515EPSS
SaveExploits0References2
Rows per page
Query Builder