1345 matches found
zkar
ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...
CVE-2021-3156
CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...
wiremax
wiremax A Wireshark/tshark dissector for Ubiquiti AirMAX AC + M and the companion Mikrotik / RouterBoard vendor Information Elements, written in Lua. It is the over-the-wire counterpart to pyrmax: the decode logic mirrors that Python package field-for-field. The AC packet format was...
mtk_bp
MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...
CVE-2019-2215
CVE-2019-2215 The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the...
CVE-2023-36874_BOF
CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...
Watchguard_WebUI_Unpacker
Watchguard Fireware Web UI update unpacker unpackwatchguard is a tool that unpacks this file format sysa-dl. watchguardsysadl.ksy contains Kaitai description of Watchguard Fireware web update file format. Info This update format is used by WatchGuard Firebox firewalls. The unpacker has been teste...
miniDumpReader
Description miniDumpReader is a Windows MiniDump MDMP reader that leverages Kaitai Struct https://kaitai.io to parse Windows memory dumps. Requirements python3 -m pip install kataistruct Usage ──parallels㉿kali-linux-/Tools/miniDumpReader └─$ python3 dmpStruct.py -h usage: dmpStruct.py -h -f FILE ...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25killbyneigh x25killbyneigh iterates through the global X.25 socket list to find sockets connected to a terminating neighbor. x25listlock protects the list membership while the lookup is in...
Astra Linux – vulnerability in linux-6.18
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In ‘struct traceeventcall’, the ‘module’ pointer and the ‘refcnt’ atomic variable share the same memory space within a union. For dynamic events, the union memb...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF of struct filelock in SMB2LOCK deferred-lock cancellation When a blocking byte-range lock request is deferred via the FILELOCKDEFERRED path, ksmbd registers the asynchronous work into the connection’s asyncrequests...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...
kernel: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
A flaw was found in the Linux kernel. A race condition in the Enhanced Transmission Selection ETS traffic-control scheduler allows a class to remain active while its associated queue structure is freed during reconfiguration. A local user with network configuration privileges or the ability to...
Exploit for Off-by-one Error in Sudo_Project Sudo
CVE-2021-3156 Heap-based buffer overflow in sudo, called Baro...
PT-2026-133656
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read struct that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer...
Cross-engine type confusion with host-created struct-types-with-supertypes
This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory...