CVE-2017-2370

0x00. Avant-propos Cette élévation de privilèges exploite une vulnérabilité présente dans machvoucherextractattrrecipetrap, et le cœur de la méthode d'exploitation consiste à utiliser les messages MACHMSGOOLPORTSDESCRIPTOR. En ce qui concerne machmsg ool, en bref, lorsqu'un message contenant un o...

CVE-2023-50387

CVE-2023-50387 KeyTrap dans le DNS CVE-2023-50387 Ce dépôt est à des fins éducatives. Le nombre de clés et de signatures a été volontairement maintenu bas pour empêcher leur utilisation dans de véritables attaques, et aucun script de génération de clés en collision n'est inclus. Test Mise en plac...

CVE-2026-74936-gc-potato

CVE-2026-74936 Не самое изящное воспроизведение. Базовая настройка потребовала некоторых доработок. Mozilla описывает эту проблему как use-after-free в WebAssembly. Публичный фикс 9823b5c86ffa сохраняет точный перехватывающий wasm::Code живым в JitActivation. Тест выполняет межэкземплярный...

Zimbra-CVE-2026-73570-Rules

Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Правила обнаружения для CVE-2026-73570 — внедрение OS-команд в Zimbra Collaboration Suite через параметр уведомления SNMP-ловушки snmpnotify. Уязвимость Поле| Детали ---|--- CVE| CVE-2026-73570 Тип| Внедрение OS-команд Затронуто| Zimbra...

cve-2023-20573-poc

Использование PoC Этот репозиторий содержит VMM, который загружает гостевую ОС SEV-SNP с пользовательским ядром. VMM и ядро представляют собой урезанную версию моего проекта. Для работы на хосте требуется модифицированное ядро Linux: https://github.com/Freax13/linux/tree/for-amd. Доказательство...

cisco-CVE-2023-20009

À propos Chercheur en sécurité : ly1g3, ly1g3attuta.io Empreinte GPG : https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Aperçu : Exécution de code à distance - RCE à partir d'un fichier de configuration CVE : CVE-2023-20009 Chronologie : Découverte - ly1g3...

CVE-2026-100722

A flaw was found in vm2. An attacker who can execute untrusted code within the sandbox can trigger an unhandled error by instantiating host-provided functions that return a rejected asynchronous operation Promise. Due to missing error handling in the sandbox-to-host object construction trap, the...

CVE-2026-100722 vm2 before 3.12.2 Host Process Termination via Construct Trap

vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled on the returned value, but the adjacent construct path returns the result of Reflect.construct without the same sanitization. If...

CVE-2026-100722 vm2 before 3.12.2 Host Process Termination via Construct Trap

vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled on the returned value, but the adjacent construct path returns the result of Reflect.construct without the same sanitization. If...

CVE-2026-100722

The vm2 library before version 3.12.2 is vulnerable to a host process termination due to a flaw in the sandbox-to-host construct trap . Specifically, the BaseHandler fails to apply host-side Promise rejection handling when the apply trap calls markHostPromiseHandled() on a returned value, while t...

CVE-2026-100722 vm2 before 3.12.2 Host Process Termination via Construct Trap

vm2 before 3.12.2 does not apply host-side Promise rejection handling in the sandbox-to-host construct trap. In BaseHandler, the apply trap calls markHostPromiseHandled on the returned value, but the adjacent construct path returns the result of Reflect.construct without the same sanitization. If...

CVE-2026-61695

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroupexpectedEndTag:unknownFieldsWriter: accepts a negative length for a LENGTHDELIMITED field inside an unknown STARTGROUP field...

CVE-2026-61695: Improper Validation of Array Index

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroupexpectedEndTag:unknownFieldsWriter: accepts a negative length for a LENGTHDELIMITED field inside an unknown STARTGROUP field...

CVE-2026-93603

vm2 through 3.12.0 fixed in 3.12.1 does not correctly handle a nullish this receiver in the apply trap of its bridge lib/bridge.js: when sandboxed code calls a host-provided non-strict sloppy-mode function without a receiver — e.g. fn, a detached method, fn.call, fn.applyundefined, Reflect.applyf...

EUVD-2026-82898

vm2 through 3.12.0 fixed in 3.12.1 does not correctly handle a nullish this receiver in the apply trap of its bridge lib/bridge.js: when sandboxed code calls a host-provided non-strict sloppy-mode function without a receiver — e.g. fn, a detached method, fn.call, fn.applyundefined, Reflect.applyf...

Astra Linux – Vulnerability in Firefox and Thunderbird

When navigating from within an iframe while requesting fullscreen access, a tab controlled by an attacker could prevent the browser from exiting fullscreen mode. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: fixed the bug in the trap in smb2lock. If the lock count is greater than 1, the flags might contain an old value. This issue should be checked using the flags of smb Lock, not those of flags. This could lead to a bug in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: parisc: Clearing stale IIR values during Instruction Access Rights Trap When a trap 7 Instruction Access Rights occurs, it means that the CPU could not execute an instruction due to missing execute permissions on the memory regio...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netdevsim: use condresched in nsimdevtrapreportwork I am still seeing many syzbot reports hinting that syzbot might fool nsimdevtrapreportwork with hundreds of ports 1 Lets use condresched, and systemunboundwq instead of implicit...

Astra Linux – Vulnerability in Firefox and Thunderbird

When resizing a popup while requesting fullscreen access, the popup becomes unable to exit the fullscreen mode. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...