CVE-2026-80665 KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvmtranslatevncr can't resolve PFN kvmhandlevncrabort assumes that s1walkresult conveys an abort when kvmtranslatevncr returns -EFAULT. This is not always the case as it's possible to encounter 'late...

blutter

Blutter Strumento di Reverse Engineering per Applicazioni Flutter Mobile tramite Compilazione del Runtime Dart AOT Attualmente l'applicazione supporta solo il file Android libapp.so solo arm64. Inoltre, l'applicazione funziona al momento solo con versioni recenti di Dart. Per le funzionalità...

copyfail-arm64

أبحاث Copy Fail ARM64 CVE-2026-31431 تحليل وإعادة إنتاج على معمارية ARM64 لثغرة تصعيد الصلاحيات Copy Fail في نواة لينكس CVE-2026-31431، التي كشف عنها في الأصل Xint. مقالة المدونة: docs/post.md ما هو مشمول الملف| الوصف ---|--- docs/post.md| مقالة المدونة التي تغطي تحليل الثغرة وعملية النقل إلى ARM...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verificato su ubuntu 18.04, ubuntu 20.04, ubuntu 22.04, kali 2024, kali 2025, kali 2026 root@kitploit: gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verificato su ubuntu 25.04 arm64 root@kitploit: gcc -o exploit exploitaarch64.c -lz && chmod +x exploit &...

CVE-2025-59489-POC

CVE-2025-59489-POC CVE-2025-59489 के लिए प्रूफ ऑफ कॉन्सेप्ट, जहाँ तक मुझे पता है यह अपनी तरह का पहला है। यह Android डिवाइस पर unity गेम्स को प्रभावित करता है। API26, Android 11, Battle Nations संस्करण sept29 2025 पर परीक्षण किया गया। केवल arm64-v8a शामिल है , आवश्यकतानुसार libpreinit.so संकलित कर...

renef-skills

renef-skills Un plugin per Claude Code che fa operare agli agenti AI renef.io correttamente — il motore di strumentazione dinamica per Android ARM64 : hook di funzioni native e Java, scansione/lettura/scrittura/patch della memoria di processo, trace delle syscall e bypass di SSL pinning /...

cve-2024-7965-poc

cve-2024-7965-poc CVE-2024-7965 ist eine Schwachstelle mit hohem Risiko in der V8-JavaScript-Engine des Google-Chrome-Browsers. Die Schwachstelle beruht auf einer fehlerhaften Implementierung der V8-Engine bei der Verarbeitung bestimmter JavaScript-Codes, was zu einer Beschädigung des...

magisk-renef

MagiskRenef Un modulo Magisk / KernelSU / APatch che impacchetta e avvia automaticamente renef — un toolkit di instrumentazione dinamica per Android. Ispirato da magisk-frida. Requisiti Dispositivo Android con root Magisk / KernelSU / KernelSU Next / APatch Solo ARM64 — renef supporta solo Androi...

machscope

MachScope Ein natives macOS-Binäranalyse-Tool, das Mach-O-Parsing, ARM64-Disassemblierung und Prozess-Debugging bietet. Vollständig in Swift geschrieben, ohne externe Abhängigkeiten. Funktionen...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...

VMPacker

🛡️ VMPacker ARM64 ELF Virtuelles-Maschinen-Schutzsystem Übersetzt native ARM64-Anweisungen in benutzerdefinierten VM-Bytecode für funktionsweisen Code-Schutz 🇨🇳 中文文档 • Funktionen • Architektur • Schnellstart • Verwendung • Lizenz Übersicht VMPacker ist ein Virtual Machine Protection VMP -System für...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

metasploit_in_termux

Metasploit Framework 6 in Termux Come Installare Prima Per avere Termux aggiornato: Cancella tutti i dati di Termux nelle impostazioni Android Disinstalla e reinstalla l'ultima versione di Termux da F-Droid La versione sul Play Store è obsoleta Quindi avvia Termux per l'inizializzazione, chiudilo...

lfi

Isolamento Leggero dei Guasti LFI Benvenuti nel repository di primo livello per il progetto Lightweight Fault Isolation LFI. Cos'è LFI? LFI è un sistema per isolare sandboxing il codice nativo. Come WebAssembly e Native Client, LFI isola il codice in sandbox in-process cioè nello stesso spazio di...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098888)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098888 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore ...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098867)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098867 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix off-by-one in checkimm signed range check checkimmbits, imm is used in the arm64...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098682)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098682 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvmarchvcpucreate fails to share the vCPU...

dirtyfrag-arm64

dirtyfrag-arm64 Porting arm64/aarch64 di V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Testato su Ubuntu 24.04.4 LTS con linux-aws 6.17.0-1013-aws su AWS Graviton il più recente disponibile al momento della scrittura. Analisi completa con bypass di AppArmor, note di hardening e rilevamento:...

The vulnerability of the bpf_int_jit_compile() function in the arch/arm64/net/bpf_jit_comp.c module, which is part of the network support functionality on the ARM 64-bit kernel of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfintjitcompile function in the arch/arm64/net/bpfjitcomp.c module, which is part of the networking support on the ARM 64-bit kernel of the Linux operating system, is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the `compat_arm_syscall()` function in the `arch/arm64/kernel/sys_compat.c` module allows a hacker to trigger a service failure on the ARM 64-bit kernel-based Linux operating system.

The vulnerability of the compatarmsyscall function in the arch/arm64/kernel/syscompat.c module of the Linux operating system’s 64-bit ARM architecture kernel is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...