CVE-2024-1086

CVE-2024-1086 إثبات المفهوم الشامل لرفع الامتيازات المحلية لثغرة CVE-2024-1086، يعمل على معظم نوى لينكس بين v5.14 و v6.6، بما في ذلك دبيان وأوبونتو وKernelCTF. نسبة النجاح 99.4% في صور KernelCTF. https://github.com/Notselwyn/CVE-2024-1086/assets/68616630/a3d43951-94ab-4c09-a14b-07b81f89b3de تدوين...

sctphantom

SCTPhantom — Site de suivi de l'use-after-free SCTP ASCONF du noyau Linux Source du suivi d'état des correctifs SCTPhantom : un site monopage recensant les distributions qui ont publié un correctif pour l'use-after-free du transport SCTP ASCONF dans le noyau Linux. Où se trouvent les faits Tout c...

EUVD-2026-68653

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

CVE-2026-82807

ieungSoft Ultra RAMDisk Pro 1.82 contains a local privilege escalation vulnerability in its kernel driver URDSCSI.sys , caused by improper privilege management in an undisclosed processing routine. A low-privilege local attacker can exploit this to gain higher-level control with a CHANGED scope (...

CVE-2026-82807 ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly...

GiveMeKernel

GiveMeKernel تحتوي هذه المستودع على نسخة مكثفة ومحسّنة من استغلال إثبات المفهوم PoC لـ CVE-2024-35250. يعتمد الكود على إصدار Varwara الأصلي من PoC. تنويه: هذا الاستغلال هو لأغراض تعليمية وبحثية فقط. استخدمه بمسؤولية وفقط على الأنظمة التي تملكها أو لديك إذن صريح لاختبارها. المؤلف غير مسؤول عن أي...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 تصعيد صلاحيات الجذر DirtyCow كانت Dirty COW ثغرة من نوع سباق race-condition في نواة لينكس. كانت هذه الثغرة موجودة داخل دوال النواة التي تتعامل مع ميزة النسخ عند الكتابة copy-on-write - COW لتعيينات الذاكرة، وعند استغلالها سمحت للعمليات بالكتابة إلى ملفات للقراءة فقط...

ghostlock-s26

GhostLock CVE-2026-43499 pour le Galaxy S26 CVE-2026-43499 porté sur la série Samsung Galaxy S26 — Android 16 / GKI 6.12. Un seul binaire, trois lignes de noyau, correspondance dynamique des paramètres à l'exécution : couvre théoriquement toute la série S26 sans compilation par build. La plupart...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds محاولة سرقة بيانات اعتماد النواة من launchd + مؤشر taskt استنادًا إلى: CVE-2017-7047 حول Triple Fetch بواسطة Ian Beer من Google Project Zero Triple Fetch هو استغلال لأجهزة iOS قبل iOS 10.3.3 يستغل خطأً منطقيًا في libxpc يسمح للمهاجمين بإرسال رسائل خبيثة تحتوي على كائنات...

CVE-2023-0045

Обход пользовательских смягчений Spectre-BTI в Linux Это рабочий документ, пожалуйста, присылайте нам отзывы, если считаете, что мы что-то упустили или пропустили ссылку Версия 1.0 Хосе Оливейра esoj Родриго Бранко BSDaemon Введение При тестировании успешности атак Spectre-BTI мы обнаружили...

android-gadget

android-gadget Résumé Certaines révisions du noyau Linux utilisé dans Android sont affectées par le problème CVE-2021-39685. Des informations détaillées et une POC pour CVE-2021-39685 peuvent être trouvées dans le dépôt inspector-gadget. Ce dépôt inclut une POC ciblant quelques gadgets USB...

CVE-2026-80609

A flaw was found in the qede driver of the Linux kernel. An out-of-bounds read vulnerability exists due to an incorrect index check for cqe-lenlist before element access. This flaw could potentially allow an attacker to cause a denial of service or disclose sensitive information...

CVE-2026-80601

A flaw was found in the batman-adv Better Approach To Mobile Ad-hoc Networking - Advanced module of the Linux kernel. When the pskbmaypull function is called by batadvgetvid, it can reallocate the buffer, causing variables to point to a freed memory region. This use-after-free vulnerability could...

CVE-2026-80679

A flaw was found in the Linux kernel. Specifically, within the s390/dasd component, the dasdreleasespace function incorrectly checks a function pointer by using a logical AND operator instead of a logical OR operator. This error can lead to a NULL pointer dereference, which may cause a system cra...

CVE-2026-80669

A flaw was found in the Linux kernel. A local attacker with the ability to load BPF Berkeley Packet Filter LSM Linux Security Module programs could exploit a vulnerability in the xfrmdecodesession hook. This could lead to a system panic, resulting in a Denial of Service DoS...

CVE-2026-80640

A flaw was found in the Linux kernel's CXL subsystem firmware control cxl/fwctl. A buffer overflow vulnerability exists in the cxlctlgetsupportedfeatures function due to improper initialization of an array size. This could lead to a system crash, resulting in a denial of service DoS...

CVE-2026-80593

A flaw was found in the Linux kernel, specifically within the hwmon hardware monitoring subsystem's asusatk0110 driver. This vulnerability occurs because the atkecpresent function does not properly check the size of a data package before attempting to read its contents. A local attacker could...

CVE-2026-80724

A flaw was found in the Linux kernel's vmclock component. This vulnerability allows a guest operating system, through a userspace process, to change a shared memory page from read-only to writable. This occurs because the vmclockmiscdevmmap function fails to properly restrict permission upgrades...

CVE-2026-80722

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. A remote attacker sending a specially crafted S1G TWT setup frame could cause the system to process an incomplete parameters block. This incomplete processing can lead to memory corruption or a system crash, resulting in a Denial of...

CVE-2026-80691

A flaw was found in the Linux kernel's SCSI target iblock module. A missing null pointer check in the iblockexecuteprout function, specifically for the ops-prclear callback during PREEMPT and RELEASE operations, allows unimplemented hooks to be called. This can lead to dereferencing a null functi...