wiremax

wiremax A Wireshark/tshark dissector for Ubiquiti AirMAX AC + M and the companion Mikrotik / RouterBoard vendor Information Elements, written in Lua. It is the over-the-wire counterpart to pyrmax: the decode logic mirrors that Python package field-for-field. The AC packet format was...

chronomaly

Chronomaly Chronomaly es un exploit del kernel para el kernel de Android / Linux usando CVE-2025-38352. El exploit fue escrito específicamente para el kernel de Linux v5.10.157, pero debería funcionar contra todos los kernels vulnerables v5.10.x, ya que no requiere ningún offset específico del...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

CVE-2019-2215

CVE-2019-2215 El siguiente problema existe en la rama android-msm-wahoo-4.4-pie de https://android.googlesource.com/kernel/msm y posiblemente en otras: Hay un use-after-free del miembro wait en la estructura binderthread del controlador binder en /drivers/android/binder.c. Como se describe en la...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

mtk_bp

MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...

pyrmax

pyrmax 用于 Ubiquiti AirMAX 线协议帧的解码器和编码器，涵盖 AC（WA 固件）和 M（XW/XM 固件）系列。 解码 ：明文外部头由 ksy/ 下的 Kaitai Struct 模式驱动。AC 载荷 （按版本门控，依据 msgtype 切换，带 deauth XOR 去掩码）由 ac.py 手写实现——该逻辑不适合纯解析式 Kaitai。 编码 ：手写实现，与解码路径逐字段对应。 Status Variant| Decode| Encode| pcap iteration ---|---|---|--- AC| ✅ 全部 5 种 msg 类型（beacon、ass...

CVE-2026-90785

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyzestruct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-90785 Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyzestruct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public...

EUVD-2026-77470

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyzestruct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public...

CVE-2026-90785

A reachable assertion vulnerability exists in the analyze_struct function (file src/compiler/semantics.c, component Struct Analysis) of Dvidelabs flatcc up to version 0.6.3. A remote, unauthenticated attacker can trigger the assertion, causing an availability impact (denial of service). The explo...

CVE-2026-90785 Dvidelabs flatcc Struct Analysis semantics.c analyze_struct assertion

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyzestruct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made public...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: The MR restrack must be released when it is deleted. The MR restrack also needs to be released when it is deleted; otherwise, a memory leak may occur, as the task struct will not be released...

UBUNTU-CVE-2026-89731

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

UBUNTU-CVE-2026-80928

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smackfilesendsigiotask When inspecting the credentials of another task, objective credentials -realcred, accessed with taskcred must always be used. Accessing -cred on a non-current task is forbidden unless...

CVE-2026-89731

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

PT-2026-91202

A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made publi...

UBUNTU-CVE-2026-89762

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...

Linux Distros Unpatched Vulnerability : CVE-2026-89731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a...

Linux Distros Unpatched Vulnerability : CVE-2026-89607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against...