kernel: ipv6: validate extension header length before copying to cmsg

A flaw was found in the Linux kernel's IPv6 networking stack. An unprivileged local user could exploit a vulnerability in how IPv6 extension header lengths are handled. By manipulating these headers using nftables, an attacker can trigger an out-of-bounds read, leading to information disclosure...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon PoC de plantage Débordement de tampon de pile avant authentification dans le service Netlogon de Windows Server 2025. Un seul paquet CLDAP UDP/389 provenant de n'importe quel hôte sur le réseau suffit : lsass.exe meurt avec STATUSSTACKBUFFEROVERRUN 0xc0000409 et le...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

EUVD-2026-94534

Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow...

CVE-2026-26399-Disclosure

CVE-2026-26399 : Use-After-Return basé sur la pile dans ArduinoCoreSTM32 versions héritées Résumé Une vulnérabilité de type use-after-return basée sur la pile existe dans les versions héritées de ArduinoCoreSTM32 antérieures à la version 1.7.0. Le problème se situe dans l'implémentation de...

CVE-2026-41089

CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════╝ ╚═══╝ ╚══════...

ghostlock-cve-2026-43499

CVE-2026-43499 GhostLock — ARM32 Kernel Privilege Escalation Research Linux kernel futex PI rtmutex Use-After-Free vulnerability research and exploit development targeting Huawei Watch 4 Pro MDS-AL00 , Snapdragon SW5100, armv7l, kernel 5.4.210. Vulnerability removewaiter in kernel/locking/rtmutex...

ghostlock-cve-2026-43499-4.19-k40

GhostLock — PoC CVE-2026-43499 noyau Qualcomm 4.19 Élévation locale de privilèges exploitant CVE-2026-43499 — un bug de rtmutex removewaiter qui laisse un struct rtmutexwaiter suspendu sur la pile noyau du waiter kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapté de NebuSec/CyberMeowfia...

CVE-2026-107678

FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in avencryptioninitinfofree in libavutil/encryptioninfo.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's movreadpssh. Attackers can supply a crafted MP4 file with tens of thousands of small pssh...

NotQuite0DayFriday

Ce dépôt documente de vrais bogues dans de vrais logiciels. Au moment de la divulgation, les versions les plus récentes avaient été corrigées. Observer les erreurs commises par le passé peut être un outil utile pour déceler les tendances des bogues qui franchissent tous les processus de contrôle...

Chimay-Red

Chimay-Red Rétro-ingénierie de l'exploit Mikrotik issu des fuites CIA Vault 7 Voir le PDF pour plus d'informations non mis à jour Versions vulnérables Jusqu'à RouterOS 6.38.4 Nouveautés dans 6.38.5 2017-Mar-09 11:32 : ! www - correction de la vulnérabilité du serveur http ; Preuves de concept...

ripple20

"Ripple20" اكتشاف أجهزة Treck الخاصة بالإنترنت الصناعي/أجهزة إنترنت الأشياء وكشف الاستغلال الإصدار 0.2 الملخص: حزمة Zeek للكشف السلبي عن أجهزة Treck، ومحاولات الاكتشاف/المسح الضوئي، واستغلال مجموعة الثغرات الأمنية "Ripple20" في حزمة بروتوكولات TCP/IP الخاصة بـ Treck. المراجع:...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

netgear_r6700v3_circled

استغلال تجاوز سعة المخزن المؤقت على NETGEAR R6700v3 CVE-2022-27646 بمساعدة التنفيذ الرمزي مقدمة يهدف هذا المستودع إلى عرض بعض وظائف Morion، وهي أداة إثبات مفهوم PoC للتجربة مع التنفيذ الرمزي على ثنائيات ARMv7 حقيقية. نعرض بعضًا من قدرات Morion من خلال تقديم مثال ملموس، ألا وهو كيف يمكنها المساعدة...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CV...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability...

libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

GenEtherExploit

GenEtherExploit هو استغلال لإثبات المفهوم PoC لثغرة macOS CVE-2023-40404. يستخدم هذا الـ PoC واجهات برمجة تطبيقات IOKit للتفاعل مع خدمة الشبكة IOUserEthernetResource، والتلاعب بواجهات الشبكة في النظام. الغرض من هذا الاستغلال هو إظهار احتمالية حدوث ذعر النواة kernel panic في أنظمة macOS المعرضة...