355 matches found
CVE-2026-29781
Sliver C2 サーバーにおけるアーキテクチャ上の脆弱性により、Reverse-C2 Weaponization（リバースC2の武器化）が可能になります。捕捉したインプラントから認証情報を抽出することで、防御側はC2の関係性を武器化し、リモートからのインフラストラクチャ・キルスイッチを発動できます。この悪用は、Protobufハンドラーにおけるnilポインタ検証の体系的な欠如を標的とし、グローバルなランタイムパニックを引き起こします。 CVE-2026-29781の影響は、C2インフラストラクチャの完全な運用麻痺です。 1...
CVE-2017-13253
CVE-2017-13253 CVE-2017-13253 の PoC コード。 完全な解説はこちらからご覧いただけます。ブログ記事とは数値が少し異なります。理由は、ヒープサイズ0x2000の場合にクラッシュする確率が高いと判明したためです（もちろん、十分な回数実行すればいずれクラッシュします）。 質問/問題/コメントについては、Twitter @tamirzb でお気軽にご連絡ください。 ビルド これをビルドするには： 1. Android ソースコードをダウンロードします。 2. このリポジトリを AOSP/external に配置します。 3. 以下のコマンドを実行します：...
blueshrimp
CVE-2025-48593のパッチを基にした概念実証です。 心配する必要はありません。私の知る限り、スマートフォンはCVE-2025-48593に対して脆弱ではありません 。この問題は、Bluetoothヘッドフォン/スピーカーとして動作できるAndroidデバイス（スマートウォッチ、スマートグラス、車など）にのみ影響します。さらに、攻撃者は被害者にペアリングさせてからでないとヘッドセットサービスにアクセスできません。スマートウォッチ/スマートグラス/車でペアリングリクエストを受け入れなければ、問題はありません。 この概念実証には何の役にも立ちません。Android...
CVE-2026-77658 Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files
A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...
UBUNTU-CVE-2026-74591
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74591
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
EUVD-2026-64528
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74591
A race condition in the Linux kernel's __filemap_add_folio() function (in mm/filemap) allows a folio to be stored at an incorrect (intermediate rounded-down) xarray index. When the split-a-conflict retry path drops the lock for memory allocation and another thread resolves the conflict meanwhile,...
Linux Distros Unpatched Vulnerability : CVE-2026-74591
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a- conflict loop, xassetorder is applied repeatedly: each application...
PT-2026-79596
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemap add folio restore index before retrying In filemap add folio's split-a-conflict loop, xas set order is applied repeatedly: each application modifies xas.xa index, rounding it down according to the split order...
SUSE CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
ALPINE-CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
UBUNTU-CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
EUVD-2026-57850
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...