PT-2026-104573

Name of the Vulnerable Software and Affected Versions Nezha versions 1.8.0 through 2.3.12 Description A lock-order inversion exists within the UpdateGroup and DeleteGroup functions. This flaw allows authenticated users without administrative privileges to cause a deadlock in the alerting subsyste...

PT-2026-104574

Name of the Vulnerable Software and Affected Versions Nezha Dashboard versions 1.8.0 through 2.3.12 Description An improper locking issue exists where a non-deferred mutex unlock leaks during a nil-map panic path. An authenticated non-admin member can exploit this by issuing four notification API...

CVE-2026-105112: Concurrent Execution using Shared Resource with Improper Synchronization

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alerting subsystem. Attackers can concurrently call the notification-group and batch-delete endpoints with oversized id lists to widen the race a...

d-os-descriptor

d-os-descriptor Summary The USB Gadget Subsystem includes security issues in the OS descriptor handling section of compositesetup function composite.c. Processing of properly crafted control transfer request messages result in device crash due to null pointer dereference or memory corruption...

SECURITY-218

This mitigation is obsolete as of Jenkins 2.54 and Jenkins LTS 2.46.2. If you have installed a 2.54+/LTS 2.46.2+ version of Jenkins anew, the Remoting-based CLI is disabled out of the box. If you installed an older version of Jenkins and upgraded to 2.54+ or LTS 2.46.2+, you will be prompted by a...

CVE-2023-21817

CVE-2023-21817 - Windows Kerberos LPE Vulnerability Checker A minimalist C++ Proof of Concept PoC / Vulnerability Checker for CVE-2023-21817. This utility helps security researchers and system administrators determine whether a Windows system is vulnerable to the Kerberos Local Privilege Escalati...

USN-8818-6: Linux kernel (FIPS) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

Multiple Samba Remote Code Execution Vulnerabilities (CVE-2026-4480, CVE-2026-4408)

Brocade has released a security advisory addressing two Remote Code Execution RCE vulnerabilities in upstream Samba software: CVE-2026-4480 and CVE-2026-4408. Both vulnerabilities result from improper input sanitization CWE-78, which allows unescaped data to be passed into system commands or...

CVE-2025-21756

CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...

copy-fail

Смягчение CopyFail CVE-2026-31431 — Руководство для нескольких дистрибутивов Этот репозиторий содержит подробные руководства и скрипты для смягчения уязвимости CopyFail CVE-2026-31431. Эта ошибка затрагивает подсистему шифрования ядра Linux AFALG и позволяет локальное повышение привилегий LPE от...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Linux 커널 algifaead 로컬 권한 상승 CISA KEV | CVSS 7.8 HIGH | Linux 커널 4.14 2026년 초반 영향 9년 목차 1. 요약 2. 위험 평가 3. 기술 심층 분석 4. 공격 방법론 — 레드 팀 5. 탐지 및 사고 대응 — 블루 팀 6. 패치 및 수정 7. 랩 환경 8. 참고 자료 1. 요약 CVE-2026-31431 은 "Copy Fail"이라는 별칭으로 불리는, Linux 커널의 암호화 하위 시스템에서 발생하는 높은 심각도의 로컬...

CopyFail-Exploits-CVE-2026-31431

CVE-2026-31431 — Copy Fail Образовательный репозиторий с реализациями эксплойта Copy Fail на нескольких языках. Создан и поддерживается @shotafry — потому что читать CVE недостаточно. Нужно его воспроизвести. 📖 Read this in English Содержание Что такое Copy Fail? Кто его обнаружил? Серьёзность и...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — Copy Fail Серьёзность: Критическая CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Статус: Доступен публичный эксплойт Краткое описание CVE-2026-31431 «Copy Fail» — это локальная уязвимость повышения привилегий в криптографической подсистеме ядра Linux. Любой непривилегированн...

CVE-2026-31431

CVE-2026-31431 — Copy Fail Copy Fail — это логическая ошибка в подсистеме криптографии ядра Linux CVE-2026-31431. Оптимизация 2017 года в algifaead.c случайно поместила страницы кэша страниц в записываемый scatterlist. Алгоритм AEAD authencesn записывает 4 служебных байта за пределы выходной...

cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 — это уязвимость, обнаруженная в Linux Kernel , относящаяся к категории уязвимостей произвольного выполнения кода , затрагивающая подсистему bpf Berkeley Packet Filter. В частности, эта уязвимость влияет на объекты типа bpfprog программ bpf и может позволить...

audit-kernel

Linux Kernel Audit Subsystem https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel The Linux Audit subsystem provides a secure logging framework that is used to capture and record security relevant events. It consists of a kernel component...

DirtyFrag-go

dirtyfrag-go Two bugs. One shell. No disk writes. Go port of dirtyfrag CVE-2026-43284 / CVE-2026-43500. How it works tl;dr The bug class is in the Linux kernel XFRM subsystem. When a file page is spliced into a pipe and then into an ESP-encrypted socket, the kernel decrypts the ESP payload in-pla...

optee-qemu

CVE-2021-44733: Fuzzing and exploitation of a use-after-free in the Linux kernel TEE subsystem Recently a use-after-free vulnerability was discovered in the Linux kernel TEE subsystem, up to and including version 5.15.11, and was assigned CVE-2021-44733 1. At a first glance it did not seem to be...

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libnetapi / libnetapi-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_22644)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202622644 advisory. samba: group policy certificate enrollment uses http:// without validation CVE-2026-3012 samba: Samba: Remote Code Execution in printing subsystem via...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_6036)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266036 advisory. kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem CVE-2025-38180 kernel: macvlan: fix error recovery in macvlancommonnewlink CVE-2026-232...