513 matches found
gstack
gstack gstack turns Claude Code and other coding agents into a virtual engineering team: a CEO who rethinks the product, an eng manager who locks architecture, a designer who catches AI slop, a reviewer who finds production bugs, a QA lead who opens a real browser, a security officer who runs OWA...
yLog4j
yLog4j This is Y-Sec's @PortSwigger Burp Plugin for the Log4j CVE-2021-44228 vulnerability. The focus of yLog4j is to support mass-scanning of the Log4j vulnerability CVE-2021-44228. Please see our Blog post for details and backgrounds. Requirements PortSwigger Burp Professional Jython 2.x It is...
CVE-2026-82961
The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...
CVE-2026-82961
The GPIO syscall handlers in drivers/gpio/gpiohandlers.c did not validate the pin argument supplied by a user-mode caller. zvrfygpiopinconfigure, zvrfygpiopingetconfig and zvrfygpiopininterruptconfigure verified only the device object KSYSCALLDRIVERGPIO / KSYSCALLOBJ and then passed the...
PT-2026-128334
The GPIO syscall handlers in drivers/gpio/gpio handlers.c did not validate the pin argument supplied by a user-mode caller. z vrfy gpio pin configure, z vrfy gpio pin get config and z vrfy gpio pin interrupt configure verified only the device object K SYSCALL DRIVER GPIO / K SYSCALL OBJ and then...
UBUNTU-CVE-2026-98475
In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schibconfig and schib fields as dma64t to enable automatic detection of incorrect assignments. Also a...
PT-2026-117023
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the page pool recycle ring bulk function when CONFIG PAGE POOL STATS is enabled. The function updates recycle statistics after releasing the producer loc...
PT-2026-116694
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Confusion between virtual and physical addresses occurs in the s390/cmf component. The measurement block address is an absolute address, but the missing virt to dma64 translation causes...
ROOT-OS-UBUNTU-2404-CVE-2025-38334 CVE-2025-38334 in linux - Patched by Root
Root has patched CVE-2025-38334 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
Exploit for Server-Side Request Forgery in Apache Ofbiz
Apache OFBiz Authentication Bypass to RCE CVE-2023-51467 V...
Linux Distros Unpatched Vulnerability : CVE-2026-15390
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP...
AZL-105729 CVE-2026-15390 affecting package qemu 10.1.0-1
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
DEBIAN-CVE-2026-15390
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
CVE-2026-15390
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
UBUNTU-CVE-2026-15390
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
EUVD-2026-88699
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
CVE-2026-15390 Out-of-bounds write in Das U-Boot
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
CVE-2026-15390
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
PT-2026-102493
Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.07 Description When configured with the CONFIG IP DEFRAG=y parameter, the software fails to clear the IP reassembly state after delivering a complete datagram. This allows an attacker capable of delivering...
PT-2026-109081
Das U-Boot with CONFIG IP DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...