CVE-2026-14960-CVE-2026-14961

Privilege Escalation Vulnerabilities in Pegatron TdeIo64 Driver tdeio64.sys | ---|--- CVE IDs| CVE-2026-14960, CVE-2026-14961 Vendor| Pegatron Corporation Product| TdeIo Driver tdeio64.sys Device Interface| \.\TdeIo Vulnerability Types| Improper Access Control CWE-284, Arbitrary Kernel Memory...

GHSA-RJ75-HQRM-R3GF PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

Impact . and are not word delimiters in the tokenizer, so a flat selector such as .a.a.a... reaches splitWord as a single word token carrying n class or id indexes. Three passes scanned those index arrays linearly for every index, making the parse On^2 in the number of indexes rather than in inpu...

CVE-2026-90390

A flaw was found in the Linux kernel's md/bitmap component. When the backlogstore function is called, it suspends the array before verifying the existence of a write-mostly device. If such a device is not found, the error handling path fails to resume the array, leaving it in a suspended state...

CVE-2026-90182

A flaw was found in the Linux kernel's blk-iocost component. When policy data is freed, the system may fail to clear a delay state, causing the block cgroup a mechanism for resource management to remain marked as congested. This persistent congestion can lead to a significant reduction in...

CVE-2026-90183

A flaw was found in the Linux kernel's blk-iolatency controller. This vulnerability occurs when the I/O latency controller incorrectly handles the clearing of delay states for I/O groups, particularly when a group without a specific latency target is throttled. This oversight can lead to a...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Произвольное чтение/запись физической памяти и портов ввода-вывода через драйвер ThrottleStop ThrottleStop — это небольшое легитимное приложение, используемое для мониторинга и исправления троттлинга процессора. Оно имеет драйвер, который выполняет эти задачи и в...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iouring/rw: fixed the omission of the NOWAIT check for ODIRECT write operations. When iouring initiates a write operation, it calls kiocbstartwrite, which triggers the super block rwsem. This prevents any freezes from occurring...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: block: Do not revert the iterator for -EIOCBQUEUED. The blkdevreaditer function includes some unusual checks. For example, it gates the position and count adjustment based on whether the result is greater than or equal to zero...

[SECURITY] Fedora 43 Update: cri-o1.36-1.36.6-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.36-1.36.6-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

CVE-2014-4076

CVE-2014-4076 PoC This proof of concept directly copied from its original python version and rewritten in C++. Build This project is built with Visual Studio 2013 Update 4. Notice Only users that in Administrators group can open the device and perform IO controls, which means the exploit only...

DylibHijackTest

DylibHijackTest Requirements Install Python3 requirements: pip3 install -r requirements.txt Compile dylib from source because don't trust compiled things from GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib How it Works ⚠️ This will spawn many processes on your machine, run this...

gvcidrv64

привет, хакеры. GVCIDrv64.sys — это подписанный драйвер ядра, который поставляется с утилитой BIOS от Gigabyte. Он создаёт \.\GVCIDrv64 без дескриптора безопасности, поэтому любой локальный пользователь может его открыть — без прав администратора, без UAC. Он предоставляет 3 IOCTL с полным...

mimikatz-detector-condrv

Mimikatz Detector - ConDrv + ConsoleMonitor This project is based on the research that was done for mimikatz detection technique phase 2. It has multiple projects in the solution: ConsoleMonitor - A GUI application in C to sniff console related traffic input output through ConDrv...

binviz

binviz Инструмент визуализации и триажа бинарных файлов: связанные интерактивные представления энтропия, гистограммы, поверхности изображений/точечных графиков, графы потока управления поверх единой модели адресного пространства. pipx install binviz && binviz serve Что он делает Откройте файл — и...

CVE-2026-31431-cleaned

copyFail.py — CVE Exploit Analysis Report Summary copyFail.py is a proof-of-concept PoC exploit that demonstrates a local privilege escalation vulnerability in the Linux kernel. By abusing the splice system call in combination with crafted socket options, the exploit gains the ability to corrupt...

PYSEC-2026-4053 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

Impact Users of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blockin...

dyen

dyen dyen loads a Mach-O dylib in memory using stock macOS Python and calls an exported entry point without dlopen on that dylib. The aim is that the image is never a standalone file on the target and is never registered with dyld. by cenobyte [email protected] 2026...

CVE-2026-13714

CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution CVE-2026-13714 — WPL Real Estate Unauthenticated RCE Realtyna Organic IDX plugin + WPL Real Estate for WordPress 5.3.0 Unauthenticated arbitrary file upload via...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...