3 casos · pág. 1/1
Trend Micro's Zero Day Initiative (ZDI) disclosed two remote code execution flaws in KSMBD, the Linux kernel's built-in SMB server, each rated CVSS 9.0. As of Thursday neither has a named fix in the mainline kernel or linux-next, and neither has a CVE identifier yet. ZDI-CAN-33774 can be triggered before authentication on port 445. ZDI-CA…
A critical Linux kernel networking flaw, CVE-2026-99999 (nicknamed PwnEscape, CVSS 9.3), lets code inside a guest VM read host memory, crash the host and, in lab conditions, run code on it. Researcher Paulos Yibelo of pwn.ai demonstrated the memory leak against Vercel's production sandboxes, which Vercel confirmed. The flaw was found in a…
Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge certificates for any domain. A researcher credited as Wayne reported it on October…
