CVE-2025-63602

CVE-2025-63602 CVE-2025-63602에 대한 공개 사항으로, Awesome Miner 11.2.4에서 안전하지 않은 드라이버를 사용하여 MSR에 대한 임의 커널 읽기/쓰기를 유발하고, 최종적으로 커널 코드 실행으로 이어지는 PoC를 포함합니다...

CVE-2026-40176-poc

CVE-2026-40176: PoC инъекции команд ОС в Composer Perforce English version Обзор Этот репозиторий представляет собой Proof of Concept PoC критической уязвимости инъекции команд ОС CVE-2026-40176 , существующей в драйвере Perforce VCS в Composer. Уязвимость затрагивает версии Composer до 2.2.27 и...

miniplasma-advisory

MiniPlasma - 취약점 보호 권고 Windows Cloud Files 미니 필터 드라이버cldflt.sys에 영향을 미치는 CVE-2020-17103의 MiniPlasma 변종에 대한 기술적 완화 보안 권고입니다. 작성자: Rafael França - Microsoft 사이버보안 설계자CSA, 고객 성공 부서CSU. 보호 권고 다운로드PDF...

microsoft-cve-2021-1675

!IMPORTANT "이 저장소는 이제 'Blue Screen' 모드입니다—보관 처리되어 시간 속에 동결되었습니다!" Microsoft-CVE-2021-1675 저는 CVE-2021-1675 취약점을 악용하는 작은 C 프로젝트를 만들었습니다. CVE-2021-1675에 대한 자세한 내용은 제 블로그 게시물을 확인하세요: https://thalpius.com/2021/07/16/windows-print-spooler-elevation-of-privilege-vulnerability-cve-2021-1675-explained...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE CVE-2025-7771에 대한 개념 증명PoC입니다. ThrottleStop.sys는 접근 통제 없이 임의의 물리 메모리 읽기/쓰기를 허용하는 두 개의 IOCTL 핸들러를 노출합니다. 즉, 관리자 권한을 가진 모든 프로세스가 물리 RAM 어디든 읽거나 쓸 수 있습니다. Windows 10 22H2 및 Windows 11 23H2 x64에서 테스트했습니다. 수행 내용 드라이버 바이너리를 IDA Pro에 로드하여 내부적으로 어떻게 동작하는지 파악하는 것부터...

PT-2026-107378

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12061-1 nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...

ROS-20261005-73-0136

The vulnerability of the mt76connac2macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt76connacmac.c file of the wireless adapter driver for mediatek’s Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

ROS-20261005-73-0154

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261005-73-0122

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

PT-2026-104818

Name of the Vulnerable Software and Affected Versions LibreOffice Calc versions prior to 26.2.5 Description LibreOffice Calc allows linking a cell range to an external data source, with the link saved within the document. An attacker can specify a Java database driver to be loaded from a remote...

ROS-20261005-73-0151

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-63277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such ...

CVE-2026-63277: Inclusion of Functionality from Untrusted Control Sphere

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run Java code from that location. In fixed versions an entry in...

ROS-20261005-73-0150

The vulnerability of the irdmacreateuserah function in the drivers/infiniband/hw/irdma/verbs.c file of the Linux operating system’s kernel driver is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a attacker to cause a servic...

ROS-20261005-73-0130

The vulnerability of the pm8001queuecommand function in the drivers/scsi/pm8001/pm8001sas.c module of the Linux SCSI device driver lies in the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261005-73-0153

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-104749

The NXP GAU ADC driver drivers/adc/adc mcux gau adc.c validated the caller-supplied sequence-buffer size, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-results length and used it in mcux gau adc read...

CVE-2026-19184: Out-of-bounds Write

The NXP GAU ADC driver drivers/adc/adcmcuxgauadc.c validated the caller-supplied sequence-buffersize, which is expressed in bytes, against the number of active channels, which is a sample count. It then stored that byte count directly in data-resultslength and used it in mcuxgauadcreadsamples as...

ALSA-2026:75747 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock CVE-2025-40242 kernel: Linux kernel: Denial of...