S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM — QEMU 崩溃 PoC 与分析 此仓库包含针对 CVE-2015-3456（“VENOM”）的可重现崩溃/拒绝服务概念验证（PoC），使用易受攻击的 QEMU 版本（v2.3.0）。 该项目演示了： 客户机控制对虚拟软盘控制器（FDC）的写入 触发易受攻击的 QEMU FDC 代码路径 使宿主机端 QEMU 进程崩溃 使用 GDB 捕获崩溃信息 此仓库不 包含虚拟机逃逸或宿主机代码执行漏洞。 仓库结构 root@kitploit: src/ venom-crash.c 客户机端崩溃 PoC scripts/ run-alpine.sh 使用...

SUSE CVE-2026-57966

A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the guest operating system. This occurs because the filename provided by the SPICE host during file transfers is not properly sanitized...

MiracleLinux 7 : kernel-3.10.0-1062.el7 (AXSA:2019-4338:05)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4338:05 advisory. Kernel: vhostnet: infinite loop while receiving packets leads to DoS CVE-2019-3900 Kernel: page cache side channel attacks CVE-2019-5489 kernel:...

CVE-2022-26362

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by...

SUSE CVE-2021-3608

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMAREGDSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The...