WiseDelete

WiseDelfile 드라이버 래퍼 경량 Windows 유틸리티로, WiseDelfile64.sys 커널 드라이버를 로드하고, 필요한 디바이스 핸드셰이크를 수행하며, 표준 Windows API로는 삭제할 수 없는 파일을 삭제하기 위해 IOCTL 요청을 전송합니다. 이 프로젝트는 CVE-2025-66680 이 드라이버를 로드한 후 사용자 모드에서 드라이버의 파일 삭제 기능을 호출하는 데 어떻게 사용될 수 있는지 보여줍니다. Features 런타임에 WiseDelfile64.sys를 로드하고 언로드합니다. 필요한 드라이버 핸드셰이...

CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

EUVD-2026-92416

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition

A use-after-free flaw was identified in the Linux kernel’s media tuner xc5000 driver. In the vulnerable code path, xc5000release calls canceldelayedwork to cancel a pending delayed work item timersleep without guaranteeing that the work handler has fully completed. Under a race condition, the...

kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list

A flaw was found in the Linux kernel's mlx5 driver. The mlx5querynicvportmaclist function, which handles querying network interface card NIC virtual port vport MAC addresses, incorrectly sizes its internal buffer. When a Virtual Function VF vport is queried with a larger configured maximum, the...

kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA bnxtre driver. A local user could exploit a race condition that occurs when a Queue Pair QP is destroyed, but completion queue CQ polling continues. This can lead to a kernel panic, resulting in a Denial of Service DoS on the...

CVE-2020-25637-libvirt-double-free

CVE-2020-25637 설명 libvirt API6.8.0 이전 버전에서 실행 중인 QEMU 도메인의 네트워크 인터페이스 정보를 요청할 때 이중 해제double free 메모리 문제가 발생했습니다. 이 취약점은 polkit 접근 제어 드라이버에 영향을 미칩니다. 보다 정확히는, 제한된 ACL 권한으로 읽기-쓰기 소켓에 연결하는 클라이언트가 이 취약점을 악용하여 libvirt 데몬을 충돌시켜 서비스 거부를 일으키거나 잠재적으로 시스템에서 권한을 상승시킬 수 있습니다. 이 취약성의 가장 큰 위협은 데이터의 기밀성과 무결성, 그...

kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...

CVE-2026-89972

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

CVE-2026-38765

CVE-2026-38765 Unistal Systems Pvt. Ltd.의 Protegent 360 v2.0.0.4에서 발견된 문제점으로, 로컬 공격자가 커널 드라이버 pgsecdl.sys를 통해 권한을 상승시킬 수 있습니다...

CVE-2026-38764

CVE-2026-38764 Unistal Systems Pvt. Ltd.의 Protegent 360 v2.0.0.4에서 발생한 문제로, 로컬 공격자가 커널 드라이버 pgsecdl.sys를 통해 권한을 상승시킬 수 있습니다...

CVE-2026-19184

The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) contains an out-of-bounds write vulnerability due to a mismatch between byte-based buffer size validation and sample-count logic. The driver incorrectly treats a byte count as the number of uint16_t slots, allowing a buffer to be overrun by ...

EUVD-2026-92285

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

CVE-2026-19184 Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatch

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

CVE-2026-19184 Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatch

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

CVE-2026-19184 Out-of-bounds write in the NXP GAU ADC driver due to byte-versus-sample buffer size validation mismatch

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

HackSysDriverExploits

HackSysDriverExploits...

rewolf-msi-exploit

rewolf-msi-exploit MSI NTIOLib/WinIO 로컬 권한 상승 더 많은 정보는 여기에서 확인할 수 있습니다: http://blog.rewolf.pl/blog/?p=1630...

OpenSC.tokend

OpenSC.tokend 오픈 소스 OS X 스마트 카드 드라이버 tokend 는 스마트 카드의 키와 인증서가 Keychain Access.app 에 표시되고 Safari나 Chrome 같은 애플리케이션에서 사용할 수 있게 해줍니다. OpenSC.tokend는 OpenSC의 오픈 소스 tokend 구현체로, 실제로 볼 수 있는 다양한 실사용 PKI 스마트 카드를 지원합니다. OS X에서의 tokend 지원 역사 2005년 OS X 10.4 "Tiger"에서 Apple은 서드파티 스마트 카드를 다른 네이티브 OS X 애플리케이션...