Lucene search
+L

301 matches found

Kitploit
Kitploit
added 2026/09/04 3:00 p.m.3 views

CVE-2018-19320-LPE

CVE-2018-19320 Exploit LPE Description Exploit d'élévation de privilèges locaux de CVE-2018-19320. L'exploit utilise les fonctions exposées dans gdrv.sys qui permettent à un utilisateur de bas niveau d'allouer et d'écrire des données en mémoire pour élever les privilèges vers SYSTEM. Capture...

7.8CVSS7.2AI score0.03597EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/04 12:34 p.m.6 views

CVE-2018-19323

CVE-2018-19323 : Framework d'exploitation GIGABYTE GDrv Aperçu Ce dépôt contient un framework d'exploitation complet et avancé pour CVE-2018-19323 , une vulnérabilité critique dans le pilote gdrv.sys de GIGABYTE. Cette vulnérabilité permet à des utilisateurs non privilégiés de lire et d'écrire...

9.8CVSS7AI score0.07828EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/01 6:12 p.m.5 views

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description Les pilotes de bas niveau GPCIDrv et GDrv dans GIGABYTE APP Center v1.05.21 et versions antérieures, AORUS GRAPHICS ENGINE avant 1.57, XTREME GAMING ENGINE avant 1.26, et OC GURU II v2.08 exposent des fonctionnalités permettant de lire et d'écrire dans la...

7.8CVSS7.2AI score0.03671EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 5:35 p.m.4 views

CVE-2018-1932X

CVE-2018-1932X Preuve de concept d'exploitation en Rust pour GIGABYTE APP Center v1.05.21 et antérieur Ce n'est pas parce que votre cible n'est pas sûre en mémoire que votre exploit doit l'être ! Vulnérabilités utilisées : CVE-2018-19320 - fonctionnalité de type memcpy en ring0 CVE-2018-19323 -...

9.8CVSS5.7AI score0.07828EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/08/31 12:29 p.m.2 views

CVE-2018-19320

CVE-2018-19320 Exploitation de la fonctionnalité de type memcpy en ring0 pour désactiver l'Application de la Signature des Pilotes DSE comme documenté ici : http://deniable.org/windows/windows-callbacks Références https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

7.8CVSS7.2AI score0.03597EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/31 1:48 a.m.3 views

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS реверс-инжиниринг SMM и исследование CVE-2025-7026/7027/7028/7029 Статический реверс-инжиниринг образа BIOS GIGABYTE H510M K V2 H510MKV2.F3: полное извлечение томов UEFI firmware и анализ аллокатора памяти SMM Core из спецификации PI, а также целенаправленный поиск четырё...

8.2CVSS8AI score0.00254EPSS
SaveExploits1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before versions 2.66.7 and 2.67.x before version 2.67.4. If the gbytearraynewtake function was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2^32, resulting in unintended length truncation...

7.5CVSS7AI score0.0408EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm/identmap: Use GB pages only when a full GB page should be mapped. When identpudinit uses only GB pages to create identity maps, large ranges of addresses not actually requested can be included in the resulting table. For...

5.5CVSS6.3AI score0.00221EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

6.5CVSS6.8AI score0.03753EPSS
SaveExploits5References2
GithubExploit
GithubExploit
added 2026/08/09 10:00 p.m.33 views

Exploit for CVE-2025-7026

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & CVE-2025-7...

8.2CVSS8.1AI score0.00254EPSS
SaveExploits1
OSV
OSV
added 2026/08/03 7:08 p.m.10 views

JLSEC-2026-1155 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in...

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

8.1CVSS7.9AI score0.00804EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:19 p.m.13 views

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

6.9CVSS5.9AI score0.00253EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/20 3:16 p.m.15 views

CVE-2026-63091

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

7.1CVSS0.00525EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/20 2:22 p.m.22 views

EUVD-2026-45961

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

7.1CVSS5.7AI score0.00525EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/20 2:22 p.m.46 views

CVE-2026-63091

ProFTPD mod_sftp in versions before 1.3.9c and 1.3.10rc3 contains a signed integer overflow in the SCP size-record parser. An authenticated, low-privilege attacker can send a crafted file size (UINT64_MAX) to produce a negative off_t, convert to uint32_t, and trigger ~4 GB read length, causing th...

7.1CVSS5.7AI score0.00525EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/19 2:54 p.m.51 views

CVE-2026-63879

The CVE-2026-63879 entry relates to the Linux kernel DRM/AMDGPU stack, where a race in amdgpu_hmm_range_get_pages could allow operations on invalid pages due to reading the notifier sequence more than once. The issue has been resolved by a patch that fixes the range getter and also tidies coding ...

7.8CVSS5.3AI score0.00172EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/19 2:54 p.m.10 views

CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpuhmmrangegetpages The notifier sequence must only be read once or otherwise we could work with invalid pages. While at it also fix the coding style, e.g. drop the pre-initialized return value and use the comm...

7.8CVSS5.3AI score
SaveExploits0References5
NVD
NVD
added 2026/07/13 4:16 a.m.16 views

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

8.5CVSS0.00157EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/13 3:41 a.m.55 views

CVE-2026-9492 GIGABYTE|Gigabyte Control Center - Improper Access Control

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

8.5CVSS0.00157EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/13 3:41 a.m.77 views

CVE-2026-9492

CVE-2026-9492 affects Gigabyte Control Center (GCC) MBStorage DRAM lighting control module. The vulnerability resides in the MyPortIO_x64.sys driver, where improper access control allows authenticated local attackers to issue IOCTL commands that can read and write physical memory, leading to kern...

8.5CVSS6.1AI score0.00157EPSS
SaveExploits0References2
Rows per page
Query Builder