IoRingReadWritePrimitive

IoRingReadWritePrimitive Post-Exploitation-Technik, um beliebige Kernel-Schreibvorgänge / Inkremente in eine vollständige Lese-/Schreib-Primitive auf Windows 11 22H2+ umzuwandeln. Dieser PoC verwendet den HackSysExtremeVulnerableDriver. Der PoC unterstützt sowohl beliebiges Schreiben als auch...

PT-2026-82776

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

CVE-2024-50804

CVE-2024-50804 Den Writeup finden Sie in meinem Blog unten. Danke! https://g3tsyst3m.github.io/cve/msi/Arbitrary-Write-Privilege-Escalation-CVE-2024-50804/...

CVE-2022-0185

CVE-2022-0185 이 저장소에는 CVE-2022-0185에 대한 데모 익스플로잇이 포함되어 있습니다. 여기에는 두 가지 버전이 있습니다. kctf 버전이 아닌 버전fuse 버전은 커널 버전 5.11.0-44를 사용하는 Ubuntu를 구체적으로 대상으로 합니다. 루트 셸을 직접 반환하지는 않지만 /bin/bash를 suid로 만들어 간단한 권한 상승으로 이어집니다. singlestart 및 modprobepath 오프셋을 조정하면 커널 버전 5.7 이상을 사용하는 대부분의 다른 Ubuntu 버전에서도 작동할 것입니다...

CVE-2026-54520

CVE-2026-54520 سمحت خطوة ملف سير العمل ai-agent-automation باجتياز المسار الذي يسمح بالقراءة/الكتابة خارج الدليل المتوقع. الإعلان الأساسي: GHSA-cm8g-8jfq-887p ائتمان الباحث: @chaitanyagarware في لمحة...

Recreate-cve-2023-21768

产生原因：对比202209和202307的AFD.sys,在函数AfdNotifyRemoveIOCompletion中，202209版的windows和202307版的windows都有一步用ProbeForWrite函数检测一段内存区域是否在用户态，但是检测的buffer地址有0x8字节的不同，而在该漏洞patch之前，没有该检查，可以猜测202209版的buffer的检查地址可能不太正确而可能无效，而该检查的buffer与中间一步赋值有关：DWORD a3 + 24 = v20;其中应该检查的buffer是a3+24,而v20的值与v8 =...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

cve-2016-0040

cve-2016-0040 poc per il bug CVE-2016-0040 trovato e sfruttato da Meysam Firozi @R00tkitSmm questo poc aiuta a scrivere dati arbitrari in un indirizzo arbitrario nel kernel di Windows per maggiori informazioni vedi il mio blog:...

cve-2024-32002-submodule-aw

CVE-2024-32002 Submódulo AW Um submódulo para demonstrar a CVE-2024-32002. Demonstra escrita arbitrária no .git. Veja cve-2024-32002-poc-aw para o POC funcional que utiliza este repositório. O que este repositório contém Simplesmente, um arquivo aleatório para que possamos detectá-lo ao clonar o...

cve-2024-32002-poc-aw

CVE-2024-32002 PRC AW Una POC per CVE-2024-32002 che dimostra la scrittura arbitraria nella directory .git. Vedi cve-2024-32002-submodule-aw per il repository del sottomodulo correlato. Cosa contiene questo repo Un symlink con un nome arbitrario che punta alla directory .git. Un file .gitmodules...

test_iconv

Testen von CVE-2024-2961 V1 – in Analyse Dieses Repository enthält ein C-Programm zum Testen von CVE-2024-2961, bei dem es sich um eine Pufferüberlauf-Schwachstelle in der Funktion iconv der GNU C Library glibc handelt. Aufgrund der Struktur des PHP-Heaps kann dieser Überlauf ausgenutzt werden, u...

Kernel-exploitation

Kernel-exploitation decompress.sh Datei aus CPIO-Archiv extrahieren root@kitploit: !/bin/sh mkdir fs cd fs cp ../initramfs.cpio.gz ./initramfs.cpio.gz gunzip ./initramfs.cpio.gz cpio -idm ../initramfs.cpio.gz &&\ cd .. &&\ gunzip -f initramfs.cpio.gz &&\ ./run.sh Falls das Archiv ein...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

EUVD-2026-65091

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privileged local attacker with user interaction could potentially exploit this to achieve Arbitrary Write . The CVSS v3.1 score is 6.6 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C...

Astra Linux – Vulnerability in Linux

In the Linux kernel before version 5.11.14, there is a use-after-free issue in the cipsov4genopt module, located in net/ipv4/cipsoipv4.c. This issue arises due to improper handling of the CIPSO and CALIPSO reference counts related to DOI definitions. As a result, an arbitrary value is written to...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Sommario Questa repository contiene un'implementazione sperimentale WebKit ROP di un exploit del kernel PS5 basata sulla Use-After-Free UAF IPV6 di TheFlow , che è stata segnalata su HackerOne. La strategia dell'exploit è in gran parte basata sulla PoC BSD/PS4 di...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-s3 versions 23.0.4...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions 14.0.4...