648 matches found
CVE-2021-25461
CVE-2021-25461 This is a repo with the Proof of Concept for the CVE discovered for the SAUSAGE Security Analysis of Unix domain Socket usAGE in Android paper that was accepted to EuroS&P 2022. I worked on this paper with Mounir Elgharabawy, the one who discovered the vuln and wrote the Proof of...
magisk-renef
MagiskRenef Un módulo de Magisk / KernelSU / APatch que empaqueta y ejecuta automáticamente renef — un kit de instrumentación dinámica para Android. Inspirado por magisk-frida. Requisitos Dispositivo Android rooteado Magisk / KernelSU / KernelSU Next / APatch Solo ARM64 — renef solo soporta Andro...
refreshing-mcp-tool
Esto no está realmente terminado ni listo aún, pero quería dejar el código subido al repositorio. Esto básicamente implementa el protocolo de base de datos de F5, «mcp», que opera a través de un socket de dominio UNIX. Eso significa que necesitas un shell en el dispositivo F5 antes de poder usar...
BIT-TOMCAT-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.42 through...
CVE-2026-21636
CVE-2026-21636 - Node.js Permission Model UDS/Network Bypass Vulnerability summary The Node.js permission model --permission is designed to sandbox a process by restricting access to the filesystem, child processes, workers, and network. CVE-2026-21636 reveals that connections made via undici/fet...
K000163240: Multiple Apache Tomcat vulnerabilities
Security Advisory Description CVE-2026-65183 Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
CVE-2026-80818
In the Linux kernel, the following vulnerability has been resolved: i...
CVE-2026-80806
In the Linux kernel, the following vulnerability has been resolved: e...
CVE-2026-80843
In the Linux kernel, the following vulnerability has been resolved: x...
CVE-2026-80907
In the Linux kernel, the following vulnerability has been resolved: d...
CVE-2026-80792
In the Linux kernel, the following vulnerability has been resolved: i...
CVE-2026-80858
In the Linux kernel, the following vulnerability has been resolved: f...
OESA-2026-3592 tomcat security update
Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: Improper Access Control,...
CVE-2026-18567
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by a TOCTOU race condition (CWE-367) involving a predictable Unix domain socket path in a world-writable directory. A local attacker with low privileges could exploit this to obtain information and cause minor availability impact, rated...
EUVD-2026-71602
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain information due to a race condition involving a predictable Unix domain socket path in a world-writable directory...
