Watchguard_WebUI_Unpacker

Watchguard Fireware Web UI update unpacker unpackwatchguard is a tool that unpacks this file format sysa-dl. watchguardsysadl.ksy contains Kaitai description of Watchguard Fireware web update file format. Info This update format is used by WatchGuard Firebox firewalls. The unpacker has been teste...

CVE-2019-2215

CVE-2019-2215 The following issue exists in the android-msm-wahoo-4.4-pie branch of https://android.googlesource.com/kernel/msm and possibly others: There is a use-after-free of the wait member in the binderthread struct in the binder driver at /drivers/android/binder.c. As described in the...

mtk_bp

MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

pyrmax

pyrmax Decoder and encoder for Ubiquiti AirMAX wire-protocol frames, covering both the AC WA firmware and M XW/XM firmware series. Decode of the cleartext outer headers is driven by Kaitai Struct schemas under ksy/. The AC payload version-gated, switched on msgtype, with the deauth XOR-unmask is...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

PT-2026-128131

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in do tcp getsockoptTCP CC INFO do tcp getsockopt reads icsk-icsk ca ops and dereferences the get info function pointer without rcu read lock. With BPF struct ops congestion control, ca ops can point to...

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

Linux Distros Unpatched Vulnerability : CVE-2026-99051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize...

PT-2026-127241

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, app sms.c copies externally controlled SMS lengths into fixed in-struct buffers without sufficient bounds checks, allowing ...

miniDumpReader

Description miniDumpReader is a Windows MiniDump MDMP reader that leverages Kaitai Struct https://kaitai.io to parse Windows memory dumps. Requirements python3 -m pip install kataistruct Usage ──parallels㉿kali-linux-/Tools/miniDumpReader └─$ python3 dmpStruct.py -h usage: dmpStruct.py -h -f FILE ...

Important: curl

Issue Overview: During an upload, curl mishandles HTTP/2 RSTSTREAM received from the server with reason HTTP11REQUIRED or REFUSEDSTREAM leading to a use after free of a struct Curleasy object. CVE-2026-92392 Affected Packages: curl Issue Correction: Run dnf update curl --releasever 2023.12.202610...

SUSE CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

DEBIAN-CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

CVE-2026-99051

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

CVE-2026-99051 fsverity: RCU-delay the freeing of struct fsverity_info

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverityinfo fsveritygetinfo calls rhashtablelookupfast, which just uses rcureadlock and doesn't directly synchronize with fsverityremoveinfo. For the same inode this isn't a problem: its...

CVE-2026-99051

The Linux kernel contains a vulnerability in the fsverity component where __fsverity_get_info() calls rhashtable_lookup_fast() using only rcu_read_lock(), failing to directly synchronize with fsverity_remove_info(). This lack of synchronization can lead to a use-after-free condition during concur...

Linux Distros Unpatched Vulnerability : CVE-2026-115386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fdreaddir implementation...

PT-2026-121907

In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc wkalrm to prevent information leak The struct rtc wkalrm has padding holes after the 'pending' member. When returned to userspace via the RTC WKALRM RD ioctl, uninitialized kernel stack data...

CVE-2026-115386

Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fdreaddir implementation that copies uninitialized struct padding into guest memory. Guests with a preopened directory can list entries to receive three bytes of...