384603 matches found
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053332)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053332 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iwconnreqhandler associates a new...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053444)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053444 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA: Verify port when creating flow rule Validate port value provided by the user and with that...
Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-085343)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085343 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svcxprtput on rpccreate failure On error situation...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053253)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053253 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Update uartdriverregistered on driver removal The removal of the last MAX3100...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-052339)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-052339 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053207)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053207 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix a null pointer crash in mtkdrmcrtcfinishpageflip It's possible that mtkcrtc-eve...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053432)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053432 advisory. In the Linux kernel, the following vulnerability has been resolved: be2net: fix potential memory leak in bexmit The bexmit returns NETDEVTXOK without freeing skb in...
IOHIDFamily-PoC-Research
CVE-2026-28992 — PoC de FastPathUserClient de IOHIDFamily Repositorio de investigación de seguridad. Dos aplicaciones PoC que demuestran las condiciones de carrera en IOHIDFamily's FastPathUserClient en iOS 18.7.1 y anteriores. ⚠️ Ambos PoCs provocarán un kernel panic y reiniciarán tu dispositivo...
CVE-2025-40019-POC
proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...
CVE-2022-0847
CVE-2022-0847 Reproducción simple de CVE-2022-0847 Dirección del artículo original del divulgador: https://dirtypipe.cm4all.com/ Entorno de reproducción root@kitploit: Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencias root@kitploit: gcc Pasos de uso...
huawei-p10-cve-2017-8890-unlock
Huawei P10 CVE-2017-8890 引导加载程序解锁研究 本仓库记录了一项经设备所有者授权的研究项目，该项目将 CVE-2017-8890 移植到一款华为 P10 固件上，将内核 use-after-free 转化为任意内核读写与临时 root 权限，重建了华为的 NVE 日志，通过合法的 NVE 驱动程序安装了一个替代的引导加载程序凭据，并验证了 fastboot 接受了所选定的明文代码。 测试目标为： Huawei P10 VTR-L29，C432 地区版本 固件 VTR-L29C432B151 Android 7.0 / EMUI 5.1 内核...
CVE-2023-2640-CVE-2023-32629-Interactive-PoC
CVE-2023-2640 和 CVE-2023-32629 GameOverLay - 真实主机根权限逃逸验证程序 一个交互式、多步骤的本地权限提升（LPE）概念验证（PoC），针对Ubuntu Linux内核OverlayFS漏洞（CVE-2023-2640 / CVE-2023-32629 ）。 与标准的自动化单行命令不同，后者会将您的交互式shell困在受限的用户命名空间（虚假根）中，本方法将漏洞利用序列拆分，以安全地获得一个 真正、不受限制的主机根shell。 "虚假根"问题解释 许多公开的漏洞利用将设置和执行串在一起，使用一个自动化的shell序列，如下所示： unshare...
linux-insides
Linux insides This repository contains a book-in-progress about the Linux kernel and its insides. The goal of this project is simple – to share knowledge about the Linux kernel internals and related low-level topics. If you're curious about what's under the hood, see the Table of Contents. Chapte...
xiaomi15-dada-cve-2026-64560
Xiaomi 15（dada）CVE-2026-64560 针对 NebuSec CVE-2026-64560 Android 概念验证的特定设备适配版本，适用于某一精确的 Xiaomi 15 构建版本。它通过仅限 ADB shell 的辅助程序，为当前启动提供临时 root 访问权限。 !WARNING 这是实验性内核漏洞利用代码。它可能导致设备重启、内核状态损坏或数据丢失。请仅在您拥有或明确获授权测试的设备上使用。请先备份重要数据。 支持的目标 属性| 必需值 ---|--- 设备| Xiaomi 15 / dada 指纹|...
CVE-2025-67246
CVE-2025-67246 漏洞标题 ：鲁大师不正确的访问控制 受影响版本 ：低于6.1026.4505.112 发现时间 ：2025年12月2日 发现者 ：周瑞 分析报告 ： 鲁大师是一款知名的免费系统实用软件，提供免费的硬件检测、电脑（手机）稳定性保障和系统性能提升。鲁大师及其附属系统产品（电脑性能优化、系统性能监控）中的 ComputerZx64.sys 驱动程序包含可读取低4GB内核地址的数据。...
CVE-2026-67277
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
CVE-2025-39866
CVE-2025-39866 - use-after-free 作者: Byte Reaper 描述 此POC尝试利用CVE-2025-39866漏洞，该漏洞是Linux系统iwb” and schedules the critical free via “wbputmany”. step 3 : - thread 2 : free wbolb - thread 1 - pointer - free object wb free old - access free address - crash kernel segfault 要求： root@kitploit: Linux x8664...
CVE-2026-67277
MikroTik RouterOS btest service is vulnerable to unauthenticated kernel memory disclosure and denial of service . An unauthenticated attacker can exploit a race condition where a "related" btest connection is accepted before primary session authentication completes, then start an IPv4 UDP test. W...
EUVD-2026-72025
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...