707 matches found
phantap
PhanTap Phantom Tap PhanTap ist ein ‚unsichtbarer‘ Netzwerk-Tap, der auf Red Teams abzielt. Mit begrenztem physischen Zugang zu einem Zielgebäude kann dieser Tap inline zwischen einem Netzwerkgerät und dem Unternehmensnetzwerk installiert werden. PhanTap ist im Netzwerk still und beeinträchtigt d...
openocd
Benvenuto in OpenOCD OpenOCD fornisce supporto per programmazione e debug on-chip con un'architettura a strati dell'interfaccia JTAG e supporto TAP, inclusi: riproduzione XSVF per facilitare il boundary scan automatizzato e la programmazione FPGA/CPLD; supporto target di debug es. ARM, MIPS:...
VPNPivot
VPN Pivot: Manchmal führen wir externe Penetrationstests durch, und wenn wir das entfernte Ziel kompromittiert haben, möchten wir das interne Netzwerk dahinter erkunden und eine solche Kompromittierung erreichen, wie Active Directory zu besitzen, auf freigegebene Dateien zuzugreifen, MITM-Angriff...
wifitap
wifitap.py --- tun/tap डिवाइस के माध्यम से WiFi इंजेक्शन उपकरण Cedric Blancher [email protected] http://sid.rstack.org/index.php/Wifitap फ़्रेंच http://sid.rstack.org/index.php/WifitapEN अंग्रेज़ी...
radmin-vpn-linux
Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...
JS-Tap
JS-Tap v3.0.4 Questo strumento è destinato a essere utilizzato su sistemi di cui si è autorizzati ad effettuare attacchi e per scopi legali ed educativi. Non utilizzare questo strumento per scopi illegali, o mi arrabbierò molto nella tua direzione generale. Registro delle modifiche Le modifiche...
rosemary
Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary intercetta trasparentemente il traffico su host remoti a livello kernel: nessuna impostazione proxy, nessun dispositivo TUN/TAP, nessun proxychains. Gli agenti si riconnettono...
CVE-2026-74684
This vulnerability is a NULL pointer dereference in the Linux kernel's net: tap module, specifically in tap_get_user_xdp(). When the vhost TX path passes an XDP buffer containing a GSO virtio-net header with the protocol field set to zero, tun_vnet_hdr_to_skb() can reach dev_parse_header_protocol...
CVE-2026-74684 net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()
In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp The commit 4f61f133f354 "net: tap: NULL pointer derefence in devparseheaderprotocol when skb-dev is null" fixed a crash in tapgetuser by assigning skb-dev...
PT-2026-79689
In the Linux kernel, the following vulnerability has been resolved: net: tap: set skb-dev before parsing virtio net header in tap get user xdp The commit 4f61f133f354 "net: tap: NULL pointer derefence in dev parse header protocol when skb-dev is null" fixed a crash in tap get user by assigning...
Linux Distros Unpatched Vulnerability : CVE-2026-74684
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tap: set skb-dev before parsing virtio net header in tapgetuserxdp The commit 4f61f133f354 net: tap: NULL pointer derefence in devparseheaderprotocol when...
reposaur
Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...
UBUNTU-CVE-2026-68405
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free APVLAN bcbuf SKBs outside IRQ lock ieee80211dostop removes APVLAN packets from the parent AP ps-bcbuf while holding ps-bcbuf.lock with IRQs disabled. It then calls ieee80211freetxskb before dropping the lock...
Oracle Linux 9 : Unbreakable Enterprise kernel (ELSA-2026-500137)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500137 advisory. - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - x86/bugs: Make...
Unbreakable Enterprise kernel security update
6.12.0-204.92.4.4.3 - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832878 CVE-2026-64561 - x86/bugs: Make Safe-RET robust against interrupt injection Borislav Petkov AMD Orabug: 39832867 CVE-2026-68480 6.12.0-204.92.4.4.2 - net: tap: set...
Important: kernel6.12
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: clear page-private in freepagesprepare CVE-2026-43303 In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks CVE-2026-45850 In the Linux...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3089-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...
CVE-2026-53516
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...
CVE-2026-53516 Better Auth: Account takeover via OAuth auto-link to unverified pre-registered email
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...