CVE-2024-51428-PoC

CVE-2024-51428 - ZoneMinder Blind SQL Injection PoC Python wrapper for sqlmap designed to exploit CVE-2024-51428 in ZoneMinder. This tool automates detection and exploitation of a Blind SQL Injection vulnerability while keeping the output clean and focused on useful data. The script hides sqlmap...

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Python scripts for exploiting CVE-2024-51482 SQLi in ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Description This script automates the extraction of databases, tables, columns, and credentials by exploiting CVE-2024-51482, a Boolean-based SQL Injection...

TID-The-Instant-Destroyer

TID — The Instant Destroyer Independent security research in the field of protection against cache-based side-channel attacks. Overview TID is a specialized protocol designed to eliminate sensitive data remnants such as cryptographic keys from CPU cache layers $L1, L2, \text and L3$ immediately...

ZoneMinder CVE-2024-51482 removetag SQLi

CVE-2024-51482 ZoneMinder = 1.37.64: boolean SQLi in ajax/event.php removetag tid parameter HTTP 200=true, 500=false. Extracts credentials. !/usr/bin/env python3 -- coding: utf-8 -- """ZoneMinder CVE-2024-51482 authenticated boolean-blind SQLi.""" from future import annotations import re from...

ZoneMinder CVE-2024-51482 SQLi Detect

Fingerprints ZoneMinder and probes ajax/event removetag tid parameter boolean SQLi requires a valid ZMSESSID. !/usr/bin/env python3 -- coding: utf-8 -- """ZoneMinder CVE-2024-51482 removetag SQLi surface authenticated oracle.""" from kittysploit import from lib.protocols.http.httpclient import...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: A potential null-ptr-deref issue was fixed in passestablish. If getepfromtid fails to find a non-NULL value for ep, ep will be dereferenced later, regardless of whether it is empty. This patch adds a simple sanity che...

PT-2026-99750

Name of the Vulnerable Software and Affected Versions fuzui StudentInfo versions up to fcc42a639ec7cef620651bfd0f07ebb660529e3f Description A remote authorization bypass exists in the Password Change Endpoint within the file /StudentInfo/StudentHandler/moditypasswordstu. The issue occurs when the...

CVE-2026-100897: Authorization Bypass Through User-Controlled Key

A security vulnerability has been detected in fuzui StudentInfo up to fcc42a639ec7cef620651bfd0f07ebb660529e3f. The impacted element is an unknown function of the file /StudentInfo/StudentHandler/moditypasswordstu of the component Password Change Endpoint. Such manipulation of the argument sid/ti...

SUSE CVE-2026-93791

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

DEBIAN-CVE-2026-93791

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

UBUNTU-CVE-2026-93791

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

EUVD-2026-86178

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

CVE-2026-93791

The Linux kernel (specifically the iwlwifi driver's mvm component) is vulnerable to an out-of-bounds access. The issue stems from the ba_notif->tid value, which is provided by the firmware as a u8 type. Because this value was used directly as an array index into tid_data[] without validation, ...

CVE-2026-93791 wifi: iwlwifi: mvm: add a check on the tid coming from the firmware

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

CVE-2026-93791 wifi: iwlwifi: mvm: add a check on the tid coming from the firmware

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

PT-2026-97990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the iwlwifi wireless driver within the mvm module. The mvmsta-tid data array was incorrectly indexed using the TFD loop counter i instead of the...

CVE-2026-93791

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: add a check on the tid coming from the firmware banotif-tid is a firmware-controlled u8 that is used directly as an array index into tiddata without any validation. Add a bounds check against IWLMAXTIDCOUNT...

SUSE CVE-2026-80943

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92dutxfilldesc uses ieee80211gettid to read the QoS TID from the 802.11 header and then uses it as an index into staentry-tids. ieee80211gettid returns the low 4-bit...

Linux Distros Unpatched Vulnerability : CVE-2026-80943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids rtl92dutxfilldesc uses...

CVE-2026-80943

A flaw was found in the Linux kernel's rtlwifi driver. This vulnerability occurs when the rtl92dutxfilldesc function uses a Quality of Service QoS Traffic Identifier TID value greater than 8 as an index into an array that only has 9 allocated entries. A remote attacker could potentially exploit...