sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

Amazon Linux 2 : libXtst (ALAS-2026-4012)

The version of libXtst installed on the remote host is prior to 1.2.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4012 advisory. An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attach...

Important: libXtst

Issue Overview: An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. CVE-2026-94286 Affected Packages: libXtst Issue Correction: Run dnf update libXtst --releasever 2023.12.20261026 or dnf update --advisor...

Important: libXtst

Issue Overview: An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients. CVE-2026-94286 Affected Packages: libXtst Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libXi (UTSA-2026-142334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142334 advisory. An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client. Tenable has...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : libXtst vulnerabilities (USN-8939-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8939-1 advisory. It was discovered that libXtst did not properly handle certain RECORD replies from th...

USN-8939-1 libxtst vulnerabilities

It was discovered that libXtst did not properly handle certain RECORD replies from the X server. A malicious X server could possibly use this issue to cause libXtst clients to crash, resulting in a denial of service. CVE-2026-94286 Tobias Stoeckmann discovered that libXtst did not properly handle...

USN-8939-1: libXtst vulnerabilities

It was discovered that libXtst did not properly handle certain RECORD replies from the X server. A malicious X server could possibly use this issue to cause libXtst clients to crash, resulting in a denial of service. CVE-2026-94286 Tobias Stoeckmann discovered that libXtst did not properly handle...

OESA-2026-4290 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...

OESA-2026-4291 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...

OESA-2026-4289 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...

OESA-2026-4288 libXi security update

libXi is the client-side library for the X Input Extension. Security Fixes: An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by aCVE-2026-93541 An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be...

Astra Linux – Vulnerability in xwayland, xorg-server

A flaw was discovered in the X.Org X server. This vulnerability, an out-of-bounds read, affects the handling of XKB X Keyboard Extension modifier maps. An attacker with access to the X11 server can exploit this by sending a malformed request, causing the server to read beyond its intended memory...

Important: libX11

Issue Overview: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the keysymmap. CVE-2026-88806 Affected Packages: libX11 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the...

EulerOS 2.0 SP13 : libXfont2 (EulerOS-SA-2026-4058)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

EulerOS 2.0 SP13 : libXfont2 (EulerOS-SA-2026-4149)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...

EulerOS 2.0 SP13 : xorg-x11-server (EulerOS-SA-2026-4207)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2026-4388)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2...

libX11: libX11: Denial of Service via out-of-bounds read in XIM attribute parser

A flaw was found in libX11. An out-of-bounds read vulnerability in the X Input Method XIM attribute parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications when processing specially crafted attributes...

CVE-2026-88812

A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a...