sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

[SECURITY] Fedora 45 Update: xorg-x11-server-Xwayland-24.1.14-2.fc45

Xwayland is an X server for running X clients under Wayland...

RLSA-2026:91366 Important: libX11 security update

The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

libX11 security update

An update is available for libX11. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libX11 packages contain the core X11 protocol client library. Security...

RLSA-2026:91365 Important: libX11 security update

The libX11 packages contain the core X11 protocol client library. Security Fixes: libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

libX11 security update

An update is available for libX11. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libX11 packages contain the core X11 protocol client library. Security...

Important: Red Hat Security Advisory: libX11 security update

An update for libX11 is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147047)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147047 advisory. A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter. A client that sets up multiple SyncCounters can trigger a use-after-free whe...

Oracle Linux 9 : libX11 (ELSA-2026-91365)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-91365 advisory. 1.8.12-1.1 - CVE-2026-88806 libX11: libX11: Heap-based buffer overflow via malicious X server X server Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1793286310)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1793286310 advisory. - A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to...

libX11 security update

1.8.12-1.1 - CVE-2026-88806 libX11: libX11: Heap-based buffer overflow via malicious X server X server...

MiracleLinux 8 : libX11-1.6.8-10.el8_10 (AXSA:2026-2204:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2204:02 advisory. libX11: libX11: Heap-based buffer overflow via malicious X server CVE-2026-88806 Tenable has extracted the preceding description block directly from the...

CVE-2026-93536

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...

CVE-2026-93523

A heap buffer overflow caused by a XIPassiveUngrabDevice request with an out-of-range modifier value in X.Org X Server before 21.1.15 and XWayland before 24.1.14 could be used by authenticated X clients to crash or potentially execute code in X server context...

CVE-2026-93524

A buffer overread in CheckKeySyms in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server...

CVE-2026-93536 X.Org Server GestureBuildSprite Use-After-Free

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...

EUVD-2026-112225

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...

CVE-2026-93536

A use-after-free vulnerability exists in X.Org X Server (before 21.1.25) and XWayland (before 24.1.14) due to missing lifecycle management of gesture sprites in GestureBuildSprite(). An authenticated X client can trigger this by providing inputs that cause WindowGone() to fail in repairing touch ...

CVE-2026-93536

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...

CVE-2026-93524 X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read

A buffer overread in CheckKeySyms in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to leak small amounts of information from X server memory or potentially crash the X server...