CVE-2026-98031

The Linux kernel is vulnerable to a null pointer dereference within the nexthop component. Specifically, the remove_nh_grp_entry() function prints the extack message when a listener fails to replace a reduced nexthop group; however, extack is not initialized and listeners are not required to set ...

CVE-2026-98031 nexthop: Initialize extack in remove_nh_grp_entry()

In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...

CVE-2026-97965

The Linux kernel contains a vulnerability in the vxlan component where a packet transmitted through a device configured with VXLAN_F_COLLECT_METADATA and VXLAN_F_GBP can cause information leakage. If the external ip_tunnel_info lacks the IP_TUNNEL_VXLAN_OPT_BIT flag, the md pointer remains pointi...

CVE-2026-97965 vxlan: initialize _md in vxlan_xmit_one()

In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...

EUVD-2026-86819

In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...

CVE-2026-97621 drm/rockchip: analogix_dp: fix unchecked bound endpoint name length

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenable uses sprintf to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficientl...

EUVD-2026-86752

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenable uses sprintf to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficientl...

CVE-2026-97554

A vulnerability exists in the Linux kernel SMB client within the cifs_posix_to_fattr() function. The issue stems from the function ignoring the return value of posix_info_parse() . When processing a malformed POSIX directory entry from an untrusted server (such as one with invalid SID lengths), t...

CVE-2025-5548

Rompiendo FreeFloat FTP: análisis y explotación de CVE-2025-5548 Anderson Steven — Máster en Ciberseguridad, Módulo 6 Vulnerabilidades Entrega individual: Metodología de análisis de vulnerabilidades y explotación Por qué este repositorio No quería entregar simplemente "aquí está el exploit...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – odhcpd Stack Overflow ⚠️ For educational and authorized testing only. Unauthorized use is illegal. 📖 Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrt’s odhcpd daemon – the default DHCPv6/DHCPv4/RA server. 🔍 How it works The vulnerability exists...

base-lamp

BASE-LAMP This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/base-lamp Image based on: https://github.com/Medicean/VulApps/tree/master/base/lamp...

urgent11-detector

urgent11-detector urgent11-detector is a tool to detect whether a device is running the Interpeak IPnet TCP/IP stack, and is thus at risk from the URGENT/11 vulnerabilities. Motivation In light of recent discoveries see https://armis.com/urgent11, we decided to develop a tool designed to detect...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2017-13089

CVE-2017-13089 Payload generator for CVE-2017-13089. This version requires manually locating the stack address to be executed. Directly attacking is also likely to succeed In the shellcode section, buf is a normal payload generated with msf; simply replace it with the payload you need. Usage:...

libunwind_CVE-2015-3239_AfterPatch

-- mode: Outline - - Esta es la versión 1.0 de la biblioteca unwind. Esta biblioteca soporta varias combinaciones de arquitectura/sistema operativo: Linux/x86-64: Funciona bien. Linux/x86: Funciona bien. Linux/ARM: Funciona bien. Linux/IA-64: Completamente probada y soportada. Linux/PARISC:...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Desbordamiento de búfer basado en pila Desbordamiento de búfer basado en pila en Sync Breeze Enterprise 10.0.28 accesible a través del manejador /login, que demuestra cómo una longitud de entrada sin verificar puede corromper la memoria de la pil...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Desbordamiento de búfer basado en pila Desbordamiento de búfer basado en pila clásico en SLMail 5.5 que muestra cómo los primeros servidores de correo podían ser comprometidos mediante comandos SMTP y POP3 sobredimensionados. 📑 Tabla de contenidos Por qué existe este...

CVE-2025-5548

🛡️ CVE-2025-5548 – Exploit de Desbordamiento de Búfer de FreeFloat FTP Server 📌 Descripción general Este repositorio documenta el descubrimiento y explotación de una vulnerabilidad de desbordamiento de búfer basada en pila en la aplicación FreeFloat FTP Server. La vulnerabilidad reside en el manej...

Linux Distros Unpatched Vulnerability : CVE-2026-88359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal ...

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-69112)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-69112 advisory. - Fix placeholder limit on :N and :pN style placeholders CVE-2026-73194 Resolves: RHEL-247869 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves:...