DiagTrackEoP

DiagTrackEoP Solo otra forma de abusar del privilegio SeImpersonate. Este PoC está basado en este blog de @crisprss. En este blog @crisprss mostró un método interesante para abusar del privilegio SeImpersonate usando AzureAttestService, que viene con versiones recientes de SQL server; el PoC se...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails 路径穿越漏洞（CVE-2018-3760） Ruby On Rails在开发环境下使用Sprockets作为静态文件服务器，Ruby On Rails是著名Ruby Web开发框架，Sprockets是编译及分发静态资源文件的Ruby库。 Sprockets 3.7.1及之前版本中，存在一处因为二次解码导致的路径穿越漏洞，攻击者可以利用%252e%252e/来跨越到根目录，读取或执行目标服务器上任意文件。 参考链接：...

Linux Distros Unpatched Vulnerability : CVE-2026-89744

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can ente...

AZL-100527 CVE-2026-89744 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

CVE-2026-89744

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

CVE-2026-89744

CVE-2026-89744 is an infinite loop vulnerability in the Linux kernel's device property subsystem , specifically in fwnode_get_next_child_node(). When iterating over children of a firmware node that has a secondary fwnode with more than one child , the primary fwnode incorrectly returns an already...

CVE-2026-89744

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

EUVD-2026-76656

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

CVE-2026-89744 device property: fix infinite loop in fwnode_for_each_child_node()

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

CVE-2026-89744 device property: fix infinite loop in fwnode_for_each_child_node()

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

dll-proxy-generator

Generador de proxy DLL Genera una DLL proxy para cualquier DLL, cargando también una DLL secundaria definida por el usuario. Uso dll-proxy-generator.exe OPTIONS --import-dll --import Argumentos Ruta a la DLL a la que se aplica el proxy Opciones root@kitploit: -d, --import-dll Extra dll to import...

PT-2026-90460

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode for each child node When iterate over children of a fwnode that has a secondary fwnode, fwnode get next child node can enter an infinite loop if the secondary fwnode has more than one...

Seecret.it

📦 Seecret.it — Compartición segura mediante enlace de un solo uso Seecret.it es un servicio en línea que permite compartir contraseñas, documentos o información sensible a través de enlaces cifrados y de un solo uso. Tus datos permanecen invisibles, seguros y se autodestruyen tras su consulta...

CVE-2026-77233

The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via AdSense Regex Rewrite in all versions up to, and including, 3.13.4 due to insufficient input sanitization and output escaping. This...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Properly handle cases where an enclosure contains only one primary component. This fix reverts to commit 3fe97ff3d949 “scsi: ses: Do not attach if the enclosure has no components”. It also introduces proper handling fo...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fixed a memory leak in inetdelifa. The following warning was encountered during the fuzzing test: unregisternetdevice: waiting for bond0 to become free. Usage count = 2 This issue can be reproduced as follows: ip link...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: PCI: Added a missing bridge lock to pcibuslock. One of the “true positives” identified by the cfgaccesslock lockdep effort is this sequence: WARNING: CPU: 14 PID: 1 at drivers/pci/pci.c:4886 pcibridgesecondarybusreset+0x5d/0x70...

Astra Linux – Vulnerability in bind9

In BIND 9.8.5 - 9.8.8, 9.9.3 - 9.11.29, 9.12.0 - 9.16.13, and versions of BIND 9 Supported Preview Edition such as 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1, as well as the release version 9.17.0 - 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a...

CVE-2026-61422 Apache CloudStack: Authenticated pre-validation SSRF in registerTemplate

Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. When registering a template or ISO, CloudStack makes a live HTTP HEAD/GET call to determine file size for secondary storage usage-limit checks, and this happens before URL validatio...

CVE-2026-75981

TranslatePress ≤3.2.5 has an unauthenticated stored XSS in translate_page() (class-translation-render.php:538-539), where plain-text markers #!trpst#/#!trpen# survive wp_kses and are rewritten to , enabling execution in visitors' browsers; CVSS 7.2 HIGH. Exploitation in the wild is not reported ...