134 matches found
NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE
NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE Этот эксплойт восстанавливает и использует CVE-2019-16098, который находится в драйвере Micro-Star MSI Afterburner 4.6.2.15658 также известном как RTCore64.sys и RTCore32.sys, позволяет любому аутентифицированному пользователю читать и записывать в произвольную...
cormem-read-poc
AVISO : Este projeto é apenas para fins educacionais e de pesquisa em segurança. Use apenas em sistemas que você possui ou para os quais tenha permissão explícita para testar. O uso não autorizado pode ser ilegal em sua jurisdição. cordrvexploit — CVE-2026-38194 Vulnerabilidade Esta ferramenta...
CVE-2019-16098
CVE-2019-16098 Der Treiber in Micro-Star MSI Afterburner 4.6.2.15658 auch bekannt als RTCore64.sys und RTCore32.sys erlaubt jedem authentifizierten Benutzer das Lesen und Schreiben in beliebige Speicherbereiche, I/O-Ports und MSRs. Dies kann für Privilegieneskalation, Codeausführung mit hohen...
CVE-2022-22077
✅ CVE-2022-22077 Exploit-Framework RTCore64.sys: Dieses Dokument bietet einen umfassenden Überblick über das CVE‑2022‑22077 Exploit‑Framework, ein anspruchsvolles BYOVD Bring Your Own Vulnerable Driver Angriffstoolkit, das die Schwachstelle im RTCore64.sys‑Treiber ausnutzt. Das Framework...
CVE-2017-16995
Descrizione della vulnerabilità Ubuntu è un sistema operativo GNU/Linux open source principalmente per desktop, basato su Debian GNU/Linux. Recentemente, un white hat ha scoperto che l'ultima versione di Ubuntu Ubuntu 16.04 presenta una vulnerabilità di escalation dei privilegi locali, con numero...
ThrottleStopPoC
ThrottleStopPoC CVE-2025-7771 : Beliebiger physischer Speicher und I/O-Port-Lesen/Schreiben über den ThrottleStop-Treiber ThrottleStop ist eine kleine legitime Anwendung zur Überwachung und Korrektur von CPU-Drosselung. Sie enthält einen Treiber, der diese Aufgaben ermöglicht, und verfügt...
CVE-2026-16933 Power System Integer Overflow
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 through OP940.81 Power HMC is affected by a vulnerability in the interface between the BMC/FSP and the host system. An attacker...
CVE-2026-16933
IBM Power Systems firmware (CWE-190 integer overflow) in the BMC/FSP-host interface allows an attacker with root or service-account access to read/write arbitrary host memory, achieving full control of the host and all partitions (CVSS 8.2 HIGH). Remediation requires upgrading to specific firmwar...
PT-2026-78582
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power System...
CVE-2026-38571
The CVE-2026-38571 case concerns the Tenda N300 F3 device (version V603), where the unauthenticated UART debug console stores WPA2 credentials in cleartext and does not require authentication for rr/wr memory read/write commands. This enables a physically proximate attacker to extract stored WPA2...
Exploit for Type Confusion in Google Chrome
SSD Advisory – Google Chrome RCE Source: ssd-disclosure.co...
CVE-2025-0028
An unchecked return value within the AMD Platform Management Framework PMF could allow an attacker to read or modify an arbitrary address potentially resulting in loss of confidentiality, integrity, or availability...
CVE-2026-45958
A flaw was found in the Linux kernel's drm/exynos: vidi driver. A local user could exploit this vulnerability by directly dereferencing a user pointer in the vidiconnectionioctl function. This allows for arbitrary kernel memory access from user space, potentially leading to privilege escalation o...
CVE-2024-21962
The CVE-2024-21962 entry concerns the AMD RAID driver and is supported by multiple sources (NVD entry and AMD security bulletin AMD-SB-4016). It describes Improper Input Validation in the AMD RAID driver that could allow an attacker to point to an arbitrary memory location, potentially resulting ...
CVE-2024-21962
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution...
EUVD-2025-209874
An unchecked return value within the AMD Platform Management Framework PMF could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution...
Exploit for CVE-2025-7771
🔓 ThrottleStop.sys Kernel Exploit — HVCI-Compatible Physical M...
PT-2026-31688
Name of the Vulnerable Software and Affected Versions Wasmtime versions 32.0.0 through 36.0.6, 42.0.2, and 43.0.1 Description Wasmtime's Cranelift compilation backend has a flaw on aarch64 architectures when handling specific heap access patterns. This can lead to incorrect address calculations,...
SUSE CVE-2026-34159
llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserializetensor skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPHCOMPUTE messages. Combined...