CVE-2023-0386_POC

Equipo CVE-MD Este repositorio proporciona una prueba de concepto para CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Miembros del equipo: Bǎnicǎ Dragoș-Marius y Borsos Matheas-Roland Aquí está el video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalada de...

inspector-gadget

inspector-gadget root@kitploit: Go Go Gadget Exploit! ..--"\ |""--.. .-' \ | '-. / |...----'\ |,,..--""--.. | '\ .--'.I. ''--..' ''",JGS/|,---' ,' .::-. ', ' ,'-;oIo;-', ' - | = | | | ; .. ; ..-;|\ - /|;-. -' / \// \ '- / ; /-'; \ ; .--| |O O |'-./ ; |/ \ ;OO/ | | \ II / | \ / |O O \ / / | ...

rndis-co

RNDIS-CO Resumen El gadget USB RNDIS puede ser explotado para volcar el contenido del espacio de memoria del kernel a través del mecanismo de actualización del filtro de paquetes. Descripción El manejador de solicitudes de transferencia de control USB RNDISMSGSET - rndissetresponse llama a...

ghostlock-h8q

GhostLock CVE-2026-43499 for Galaxy Z Fold 8 h8q / Fold 8 Ultra q8q Most of this code is based on @polygraphene's fork of the original. Heavy modifications were required because the main primer used select for most published variants of the exploit does not properly align with the rtmutexwaiter...

nftables-oob-read-write-exploit-CVE-2023-35001-

Exploit de lectura/escritura fuera de límites OOB en nftables CVE-2023-35001 Exploit utilizado en pwn2own Vancouver 2023 en Ubuntu de escritorio. El exploit admite la versión del kernel disponible al comienzo del evento 5.19.0-35. Requisitos Compilador de C Compilador de Go Uso root@kitploit: Bui...

CVE-2023-35001

Exploit de lectura/escritura oob en nftables CVE-2023-35001 Exploit utilizado en pwn2own Vancouver 2023 en el escritorio de Ubuntu. El exploit es compatible con la versión del kernel disponible al comienzo del evento 5.19.0-35. Requisitos Compilador de C Compilador de Go Uso root@kitploit: Build ...

-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272

-CVE-2019-13272...

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

CVE-2025-51619

CVE-2025-51619 affects the Thesycon DPC Latency Checker driver (dpc.sys ) versions through 1.4.0 on Windows. The root cause is an unvalidated pointer dereference in the driver's IOCTL interface (0x81772008 ): a user-supplied pointer is dereferenced and the resulting value is passed to ExSetTimerR...

RockyLinux 8 : kernel-rt (RLSA-2026:64770)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64770 advisory. kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel:...

RHEL 9 : kernel (RHSA-2026:65708)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65708 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: rxrpc: Fix potential UAF afte...

The vulnerability of the __iptfs_init_state() function in the net/xfrm/xfrm_iptfs.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the rzv2h_ivc_transfer_buffer() function in the drivers/media/platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c file of the Linux multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rzv2hivctransferbuffer function in the drivers/media/platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c file, a driver for multimedia devices in the Linux operating system, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the dpu_writeback_init() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpuwritebackinit function in the drivers/gpu/drm/msm/disp/dpu1/dpuwriteback.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow...

The vulnerability of the adis16260_write_raw() function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the netem_enqueue() function in the net/sched/sch_netem.c module of the Linux operating system’s network scheduling subsystem allows a attacker to cause a service failure.

The vulnerability of the netemenqueue function in the net/sched/schnetem.c module of the Linux operating system’s network scheduling subsystem is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability of the stub_xfer() function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the omninet_port_remove() function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the omninetportremove function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the ebtables_init() function in the net/bridge/netfilter/ebtables.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ebtablesinit function in the net/bridge/netfilter/ebtables.c module, which is part of Linux’s kernel-based networking functions, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations beyond the buffer boundaries in...