CVE-2026-89437

A flaw was found in the Linux kernel. The sarprobe function, specifically in its error handling paths, fails to free memory allocated for devicemodeinfo by the parsepackage function, which is called by sargetdata. This oversight leads to a memory leak. Repeated occurrences of this flaw could...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset 스택 버퍼 오버플로 PoC Hunt-Benito 기사의 동반 PoC "GO Without Bounds: CVE-2026-67822 — Tenda W6-S의wifiSSIDset 폼 핸들러의 스택 오버플로". CVE-2026-67822 CVSS 9.8 Critical, CWE-121은 Tenda W6-S 무선 액세스 포인트의 /bin/httpdGoAhead 기반 웹 서버에 있는 /goform/wifiSSIDset 엔드포인트를 구현하는 C 함수...

CVE-2021-1675

CVE-2021-1675 CVE-2021-1675: 모든 운영 체제 버전에서 익스플로잇이 존재하는 Windows 프린터 서비스의 제로데이 취약점 MS가 공식 패치를 배포할 때까지 이 취약점을 완화하기 위해 제가 찾은 방법 중 하나를 공유합니다. Windows PowerShell을 관리자 권한으로 실행합니다. 참고: Servers.txt 도메인의 모든 서버를 포함하되, 인쇄 서버 역할이 설치된 서버는 제외합니다. root@kitploit: $server= Get-Content C:\Script\Servers.txt...

CVE-2026-89730

A flaw was found in the altera-cvp FPGA driver within the Linux kernel. The alteracvpsendblock function can perform an out-of-bounds read when processing the trailing bytes of an input buffer. This occurs if the buffer ends at a page or scatterlist boundary, causing the function to read past vali...

CVE-2026-89523

A flaw was found in the Linux kernel's MediaTek mt7925 Wi-Fi driver. When the device is reset, suspended, or unregistered, a pending work item mlopmwork can continue to execute. This can lead to the work item accessing memory that has already been freed a use-after-free vulnerability or sending...

CVE-2026-89474

A flaw was found in the Linux kernel's power supply subsystem, specifically within the bq256xx driver. This vulnerability occurs when a USB work item attempts to access a charger object after it has been freed. This timing issue can lead to a use-after-free condition, potentially causing system...

CVE-2026-89463

A flaw was found in the Linux kernel's ucs1002 power supply driver. The driver does not properly cancel a delayed work item during device removal, leading to a use-after-free vulnerability. This issue allows the system to attempt to access memory that has already been freed, which can result in...

CVE-2026-89656

A flaw was found in libceph within the Linux kernel. This vulnerability allows a local attacker to craft a malformed CRUSH map, which is used for data placement. By doing so, one data bucket can be made to reuse another bucket's memory workspace, leading to an out-of-bounds write. This memory...

CVE-2026-80940

A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI Networked Attached Peripheral Interface setup fails, allocated PCI resources are not properly released. This resource leak could potentially lead to a Denial of Service DoS due to resource exhaustion,...

CVE-2026-80982

A flaw was found in the Linux kernel's Shared Memory Communications SMC network protocol. A race condition occurs when a network connection is closed while the system is still processing its receive buffer pages. This can lead to a use-after-free vulnerability, where the system attempts to access...

CVE-2023-33768

CVE-2023-33768 설명 Belkin Wemo Smart Plug WSP080 v1.2의 Device Firmware Update 프로세스 중 펌웨어 서명 검증이 올바르지 않아 공격자가 조작된 펌웨어 파일을 통해 서비스 거부DoS를 유발할 수 있습니다. 추가 정보 Wemo 스마트 플러그의 펌웨어를 모바일 애플리케이션을 통해 업데이트할 때, 스마트 플러그 펌웨어 바이너리의 펌웨어 서명이 유효하지 않으면 Wemo 스마트 플러그가 응답을 중지하게벽돌이 되어 만들 수 있음을 발견했습니다. 우리는 Wemo Android...

CVE-2026-89747

A flaw was found in the Linux kernel's tracing component. A local attacker could exploit a use-after-free vulnerability, a type of memory corruption, by manipulating the tracepipe functionality. This occurs when the system attempts to read from memory that has already been released, leading to...

CVE-2026-89604

A flaw was found in the Linux kernel's efivarfs component. An unprivileged local user can exploit this by repeatedly calling the statfs handler on the efivarfs mount point. This action triggers a flood of calls to the QueryVariableInfo runtime service, which is particularly costly on x86 systems...

CVE-2026-89498

A flaw was found in OrangeFS within the Linux kernel. A local client, by sending a specially crafted readdir downcall with a declared trailersize exceeding the actual supplied bytes, can trigger a double-free vulnerability. This memory corruption issue can lead to a system crash, resulting in a...

CVE-2026-89468

A flaw was found in the Linux kernel's lp8788-charger component. During the removal of the lp8788-charger, a race condition can occur where work can be queued and executed after the associated memory has been freed. This use-after-free vulnerability could lead to system instability or a denial of...

CVE-2026-89460

A flaw was found in the Linux kernel. A local user can trigger a kernel panic by running the perf stat command while CPUs are being hotplugged. This occurs because the system fails to properly allocate CPU event structures for newly online CPUs, leading to a null pointer dereference. Successful...

CVE-2026-89442

A flaw was found in the Linux kernel. The isstifclosassoc ioctl function in the platform/x86: ISST module contains an improper validation of the socketid. This allows a local attacker to cause an out-of-bounds access or a NULL pointer dereference. This could lead to a system crash, resulting in a...

CVE-2026-89661

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A local administrator with CAPSYSADMIN capabilities can trigger a use-after-free vulnerability by writing to /proc/fs/nfsd/unlockfilesystem after the NFSD server has shut down. This can lead to memory corruption, potentially...

cve-2006-6184

CVE-2006-6184 이것은 CVE-2006-6184를 위한 파이썬 기반 독립 실행형 익스플로잇입니다. 이 익스플로잇은 Allied Telesyn TFTP Server AT-TFTP 1.9 및 이전 버전에서 스택 기반 버퍼 오버플로우를 트리거하여 원격 공격자가 서비스 거부를 일으키거나 임의 코드를 실행할 수 있게 합니다. 지침 2020년 업데이트 페이로드는 사용자의 IP 주소와 리스닝 포트를 포함하도록 사용자 정의해야 하므로 수동으로 생성해야 합니다. 다음 단계를 사용하세요: 1. 스택 포인터에서 빼야 할 양3500의 16...

CVE-2026-89729

A flaw was found in the Linux kernel's Human Interface Device HID sensor-hub driver. A local attacker could exploit this vulnerability by providing a specially crafted HID descriptor. This malicious descriptor could cause the sensorhubgetfeature function to write data beyond the intended memory...