EUVD-2026-64360

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...

CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

EUVD-2026-64356

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

EUVD-2026-64350

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74663

CVE-2026-74663 affects the Linux kernel in the net/sched subsystem. Deep queueing discipline (qdisc) hierarchies can cause excessive recursion in qdisc tree walkers, exhausting the kernel stack and leading to a Denial of Service via system crash. The existing loop check does not cover the create-...

CVE-2026-74663 net/sched: reject overly deep qdisc hierarchies

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies can lead to excessive recursion in qdisc tree walkers and exhaust the kernel stack. The existing loop check does not cover the create-and-graft path, so a...

CVE-2026-74627 net: devmem: prevent net-iov / page mixing

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We should either have netiov or page backed frags in a single skb, otherwise it blows up down the stack. Don't allow mixing in zerocopyfillskbfromdevmem...

CVE-2026-74627

CVE-2026-74627 affects the Linux kernel's net: devmem component. The root cause is improper mixing of net_iov and page-backed fragments within a single skb in the zerocopy_fill_skb_from_devmem() function, which causes a crash downstream in the stack. Red Hat classifies the impact as Denial of Ser...

CVE-2026-77946

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

CVE-2026-77946

A stack-based buffer overflow in the NTP Timezone Configuration Handler of TRENDnet TEW-821DAP firmware 2.2.01b05 allows remote, unauthenticated attackers to achieve full system compromise (CVSS 10.0 CRITICAL). The vulnerable function is uci_safe_get in /cgi-bin/apply_time.cgi ; manipulating the ...

CVE-2026-77946 TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

EUVD-2026-64247

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function ucisafeget of the file /cgi-bin/applytime.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation of the argument...

CyberMeowfia-ace3

Sito web: nebusec.ai · Twitter @nebusecurity · Lista bug 885+ Follow-up su IonStack, segui https://github.com/NebuSec/CyberMeowfia/issues/44 Ultime ricerche IonStack part II : GhostLock, uno stack-UAF che esiste in TUTTE le distribuzioni Linux da 15 anni Linux Kernel 📖 Writeup · 🐦 Twitter Longinu...

CallStackSpoofer

CallStackSpoofer Questo repository dimostra un'implementazione PoC per spoofare call stack arbitrarie quando si effettuano chiamate di sistema. Per una descrizione tecnica completa, consulta il post del blog qui: https://labs.withsecure.com/blog/spoofing-call-stacks-to-confuse-edrs. Di default...

Damn_Vulnerable_C_Program

Nota: o nome do arquivo foi alterado de imgRead.c para dvcp.c; se você estiver assistindo vídeos, verá imgRead.c, mas no repositório do GitHub verá dvcp.c, use o nome de arquivo correto. Damn Vulnerable C ProgramDVCP Meu Canal no YouTube:...

ghidra_stack_strings

Ghidra Stack-strings Ein Skript zur Erkennung von Stack-Strings, die von den ausgewählten x86/x64-Befehlen geschrieben werden, emuliert mithilfe von Unicorn. Das Skript ist in Python 3 geschrieben und benötigt daher Ghidrathon...

CVE-2023-50965

💥 CVE-2023-50965 — Stack-Pufferüberlauf-Exploit Linux Proof-of-Concept-Exploit für CVE-2023-50965 , der einen stackbasierten Pufferüberlauf demonstriert, der auf anfälligen Systemen ohne aktivierte Exploit-Mitigationen zu Remote Code Execution RCE führt. Dieses Projekt wurde für...

SUSE CVE-2026-18297

GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a...