CVE-2018-19320-LPE

CVE-2018-19320 Exploit LPE Description Exploit d'élévation de privilèges locaux de CVE-2018-19320. L'exploit utilise les fonctions exposées dans gdrv.sys qui permettent à un utilisateur de bas niveau d'allouer et d'écrire des données en mémoire pour élever les privilèges vers SYSTEM. Capture...

CVE-2018-19323

CVE-2018-19323 : Framework d'exploitation GIGABYTE GDrv Aperçu Ce dépôt contient un framework d'exploitation complet et avancé pour CVE-2018-19323 , une vulnérabilité critique dans le pilote gdrv.sys de GIGABYTE. Cette vulnérabilité permet à des utilisateurs non privilégiés de lire et d'écrire...

CVE-2018-19321

CVE-2018-19321 CVE-2018-19321 Description Les pilotes de bas niveau GPCIDrv et GDrv dans GIGABYTE APP Center v1.05.21 et versions antérieures, AORUS GRAPHICS ENGINE avant 1.57, XTREME GAMING ENGINE avant 1.26, et OC GURU II v2.08 exposent des fonctionnalités permettant de lire et d'écrire dans la...

CVE-2018-1932X

CVE-2018-1932X Preuve de concept d'exploitation en Rust pour GIGABYTE APP Center v1.05.21 et antérieur Ce n'est pas parce que votre cible n'est pas sûre en mémoire que votre exploit doit l'être ! Vulnérabilités utilisées : CVE-2018-19320 - fonctionnalité de type memcpy en ring0 CVE-2018-19323 -...

CVE-2018-19320

CVE-2018-19320 Exploitation de la fonctionnalité de type memcpy en ring0 pour désactiver l'Application de la Signature des Pilotes DSE comme documenté ici : http://deniable.org/windows/windows-callbacks Références https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research

GIGABYTE H510M K V2 BIOS реверс-инжиниринг SMM и исследование CVE-2025-7026/7027/7028/7029 Статический реверс-инжиниринг образа BIOS GIGABYTE H510M K V2 H510MKV2.F3: полное извлечение томов UEFI firmware и анализ аллокатора памяти SMM Core из спецификации PI, а также целенаправленный поиск четырё...

Astra Linux – Vulnerability in glib2.0

A issue was discovered in GNOME GLib before versions 2.66.7 and 2.67.x before version 2.67.4. If the gbytearraynewtake function was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2^32, resulting in unintended length truncation...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: x86/mm/identmap: Use GB pages only when a full GB page should be mapped. When identpudinit uses only GB pages to create identity maps, large ranges of addresses not actually requested can be included in the resulting table. For...

Astra Linux – Vulnerability in libxml2

In libxml2 versions before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer do not check for integer overflows. This can lead to out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software that uses libxml2’s...

Exploit for CVE-2025-7026

GIGABYTE H510M K V2 BIOS SMM Reverse-Engineering & CVE-2025-7...

JLSEC-2026-1155 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in...

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

CVE-2026-66913

Lookyloo did not enforce limits on the decompressed size of uploaded capture archives and compressed HAR files. An attacker could submit a specially crafted ZIP, gzip, or zlib-compressed capture containing data that expands to a very large size during processing. Because the application...

CVE-2026-63091

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

EUVD-2026-45961

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the modsftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64MAX, which results in a negative offt value. Attackers...

CVE-2026-63091

ProFTPD mod_sftp in versions before 1.3.9c and 1.3.10rc3 contains a signed integer overflow in the SCP size-record parser. An authenticated, low-privilege attacker can send a crafted file size (UINT64_MAX) to produce a negative off_t, convert to uint32_t, and trigger ~4 GB read length, causing th...

CVE-2026-63879

The CVE-2026-63879 entry relates to the Linux kernel DRM/AMDGPU stack, where a race in amdgpu_hmm_range_get_pages could allow operations on invalid pages due to reading the notifier sequence more than once. The issue has been resolved by a patch that fixes the range getter and also tidies coding ...

CVE-2026-63879 drm/amdgpu: fix amdgpu_hmm_range_get_pages

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpuhmmrangegetpages The notifier sequence must only be read once or otherwise we could work with invalid pages. While at it also fix the coding style, e.g. drop the pre-initialized return value and use the comm...

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

CVE-2026-9492 GIGABYTE｜Gigabyte Control Center - Improper Access Control

The MBStorage DRAM lighting control module within Gigabyte Control Center GCC developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIOx64.sys bundled with the module, thereby arbitrari...

CVE-2026-9492

CVE-2026-9492 affects Gigabyte Control Center (GCC) MBStorage DRAM lighting control module. The vulnerability resides in the MyPortIO_x64.sys driver, where improper access control allows authenticated local attackers to issue IOCTL commands that can read and write physical memory, leading to kern...