Linux tgt / tgtd iSCSI
Linux tgt / tgtd iSCSI is A SCSI WRITE's Data-Out Buffer Offset is added to the target buffer with no bounds check in tgtd → arbitrary heap write. Two more in-tree bugs leak heap/image/libc. Unauthenticated by default, runs as root, present…. It is ranked #1568 on the Dev Radar, in Security, first seen 2 days ago and shared in 1 post (1.6k views).
Linux tgt (scsi-tgt) iSCSI — Unauthenticated Remote Root RCE — warez.sl0p.foo ← warez.sl0p.foo Linux tgt (scsi-tgt) iSCSI — Unauthenticated Remote Root RCE 2026-08-02 · CRITICAL · affects fujita/tgt (tgtd) ≤ 1.0.97 / HEAD · write primitive shipped since 2007 · 0day — no CVE, no patch iSCSHELL — plug the cable in, get a shell out. Initiator → Target → Shell; the middle step was supposed to be harder. *The job of an iSCSI target is to write the bytes you send it to the block you name. tgtd does exactly that — it just never checks that the block is on the disk. Name an offset past the buffer and it writes your bytes into the heap instead. It…
What people said about Linux tgt / tgtd iSCSI on X
If you have iSCSI through Linux exposed to the internet then you need to get it offline immediately! Remote, pre-auth code execution *0day* detailed in the blog post below. Since this morning, @SeraphimDomain put together a really nice detection and verification guide to help defenders:…
— @attrc, 2 days ago · 15 likes · see the post
Alternatives to Linux tgt / tgtd iSCSI
- OrcaRouter — Cyber Tier API
- rea — Reverse engineer programs with REA (rea.tools): native binaries, .NET assemblies, Electron/JavaScript apps, Android…
- Steal My Bitcoin — Someone has created a vulnerable PHP website, loaded it with a Bitcoin wallet, and challenged the Internet to hack…
- ultrafuzz — End-to-end agentic smart contract fuzzing and threat hunting - monad-developers/ultrafuzz
- cve.now — puts the ones that need action in one free feed, and your coding agent can check them for you.
- OpenClaw — 107 contributors. Thank you!
Linux tgt / tgtd iSCSI in numbers
- Rank on the Dev Radar: #1568 of 8810
- Shared in 1 post by 1 account: @attrc
- 1.6k views on those posts
- First seen 2 days ago, last shared 2 days ago
- Pricing seen by AGK Intelligence: free
- Market: Security
FAQ
What is Linux tgt / tgtd iSCSI?
A SCSI WRITE's Data-Out Buffer Offset is added to the target buffer with no bounds check in tgtd → arbitrary heap write. Two more in-tree bugs leak heap/image/libc. Unauthenticated by default, runs as root, present… It was first shared on X 2 days ago and is ranked #1568 on the Dev Radar.
Is Linux tgt / tgtd iSCSI free?
Yes, it is free to use.
Who shared Linux tgt / tgtd iSCSI?
1 account on X, including @attrc, in 1 post totalling 1.6k views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 22:12 UTC. Full method.