1797 matches found
Astra Linux – Vulnerability in opensc
The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...
cve-2023-29360
PoC for CVE-2023-29360 Exploit targeting MSKSSRV.SYS driver Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Thomas Imbert @masthoon from Synacktiv @Synacktiv...
AmdRyzenMasterCheat
ECPRO-LAN Anti-Cheats: FACEIT, ESEA w/ custom version Early 2019 - late 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requirements: Windows 10 Enterprise 1607 LTSB with all updates AMD Ryzen CPU Motherboard B350-B450 B550 client is bugged Logitech GHUB installed for mouse input Older gen...
echoac-poc
CVE-2023-38817 A PoC and writeup on vulnerabilties discovered in echo.ac's driver. CVE Info Number: CVE-2023-38817 Vendor: Inspect Element Ltd 13017981, trading as Echo. Affected Products: echo.ac AntiCheat scanner tool. Affected Versions: echo.ac - 5.2.1.0, echodriver.sys - All shipped versions...
letsdefend-cve-2024-49138-investigation
LetsDefend Investigation: CVE-2024-49138 🔍 Overview Hands-on SOC investigation and incident response simulation using LetsDefend, focused on a real-world exploitation of CVE-2024-49138 — a privilege escalation vulnerability in Windows CLFS driver. 📅 Event Details Event ID : 313 Incident Type :...
EDRKiller
EDRKiller Use cve-2026-36425 killer edr,360 can killer Kills any antivirus processes, including but not limited to 360 Security and Huorong Security. I am exploiting a driver vulnerability for process manipulation, registering the driver via NT‑functions. No hiding is implemented. Compiled with...
CVE-2017-13672
CVE-2017-13672 POCs for CVE-2017-13672 OOB read in VGA Cirrus QEMU driver, causing DoS...
CVE-2026-69393
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
CVE-2026-69384
Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...
CVE-2026-69384
A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...
CVE-2026-71345
CVE-2026-71345 is an out-of-bounds write vulnerability in the Windows driver Spaceport.sys that allows an authorized low-privilege attacker to achieve local code execution . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that explo...
CVE-2026-69549
An out-of-bounds read in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally . The vulnerability is scored 7.0 (HIGH) by Microsoft with a vector of local attack, high complexity, and low privileges required, yielding high impact across confident...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: ti: am65-cpsw: Fix for freeing the IRQ in am65cpswnussremove Txchns. When obtaining the IRQ, we use k3udmagluetxgetirq, which returns a negative error value if there is an error. Therefore, checking if the IRQ is...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
An incorrect read request flaw was detected in the Infrared Transceiver USB driver within the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could exploit this flaw to deplete system resources, resulting in a denial of service or potentially causing the...
The vulnerability in the drivers/hid/hid-pl.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/hid/hid-pl.c component in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2026-74505
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a...
EUVD-2026-59032
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to...