556 matches found
evilqr
Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...
PoC
PoC A collection of proof-of-concept codes from DARKNAVY. CVE-2025-43300 Target: iOS && macOS Version: before iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Version: before 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Version: before 125.0.6422.112 Blog Post: CVE-2024-527...
BrokenPipe
BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...
HWID-SteamSpywareTerminator
SteamSpywareTerminator fuck you, burtonJ Work in progress currently only logs thread initialization library that once injected into steam, aims at blocking CSteamEngine::CFillMachineInfoThread which is a hidden thread that collects encrypted information regarding your hard drives, network adapter...
mgo3-rce
MGO3 RCE This repository contains information regarding CVE-2026-19874. documentation video demo Timeline 2026-06-26: vulnerability is discovered 2026-06-26: first contact with Konami 2026-07-01: vulnerability is reported to Konami 2026-08-04: vulnerability is silently patched by Konami...
CVE-2026-98945
A flaw was found in the Linux kernel's Steam Human Interface Device HID driver. A timing issue during the device teardown sequence allows scheduled background tasks to access memory after it has been freed. A local attacker could exploit this use-after-free condition to cause a system crash,...
CVE-2026-98944
A flaw was found in the Linux kernel's Steam Controller HID Human Interface Device driver. This issue allows a local user to cause a Denial of Service DoS by triggering a device registration failure. During an unsuccessful registration sequence, the driver fails to properly unregister the battery...
SUSE CVE-2026-98943
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
SUSE CVE-2026-98944
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...
SUSE CVE-2026-98945
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This...
CVE-2026-98943
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
DEBIAN-CVE-2026-98943
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not being guarded behind a lock...
CVE-2026-98945
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This...
CVE-2026-98944
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...
DEBIAN-CVE-2026-98944
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...
DEBIAN-CVE-2026-98945
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This...
AZL-110741 CVE-2026-98944 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we now only perform registration when the client isn't opened anymore, the logic for handling that can be removed, and th...
AZL-110744 CVE-2026-98945 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This...
UBUNTU-CVE-2026-98945
In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callbacks could still be scheduled during cleanup that would then have a dangling pointer to the now-freed steam struct. This...