478 matches found
CVE-2019-6340
CVE-2019-6340 教育目的のみ 実行 root@kitploit: $ docker run --rm -p 8080:80 knqyf263/cve-2019-6340 エクスプロイト GET root@kitploit: $ curl -XGET -H "Content-Type: application/hal+json" "http://localhost:8080/node/1?format=haljson" -d ' "link": "value": "link", "options":...
CVE-2017-13253
CVE-2017-13253 针对 CVE-2017-13253 的概念验证代码。 完整的文章可在 此处 获取。请注意，数字与博客文章略有不同，因为我发现使用堆大小为 0x2000 时崩溃的可能性更高（当然，只要运行足够多次，它无论如何都会崩溃）。 如有问题/问题/评论，欢迎通过 Twitter @tamirzb 联系我。 构建 要构建此代码： 1. 下载 Android 源代码。 2. 将此仓库放入 AOSP/external。 3. 运行以下命令： root@kitploit: cd AOSP source build/envsetup.sh make icryptooverflow...
CVE-2021-21551
PoC per CVE-2021-21551 LPE di Windows che utilizza il driver Dell dbutil23.sys. Approccio dell'exploit Implementa lettura/scrittura, alloca shellcode, capovolgi la pagina per bypassare smep, sovrascrivi il puntatore haldispatch, esegui shellcode...
hal
Willkommen bei HAL! HAL /hel/ ist ein umfassendes Framework zur Reverse-Engineering und Manipulation von Netlisten. Navigation 1. Einführung 2. Build-Anweisungen 3. Schnellstart-Anleitung 4. Akademischer Kontext Einführung Was zum Teufel ist HAL? Nahezu alle verfügbaren Forschungen zur...
CVE-2026-74341 wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte halbuf without validating the response length. A response exceeding...
Linux Distros Unpatched Vulnerability : CVE-2026-74341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: added srng-lock for ath11khalsrng in monitor mode. ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and ath11kdpfullmonprocessrx, they use ath11khalsrng multiple times,...
CVE-2026-20492
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...
CVE-2026-20478
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 Note: For MT6880, MT6890, MT6988, MT6990 / AUTO00851293...
CVE-2026-20492
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...
CVE-2026-20492
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960026 Note: For MT6880, MT6890, MT6990, MT6988 / AUTO00851250...
EUVD-2026-52069
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...
CVE-2026-20480
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...
CVE-2026-20480
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10960023 Note: For MT6880, MT6890, MT6980D, MT6988, MT6990 /...
CVE-2026-20478
CVE-2026-20478 relates to the Audio HAL and describes a possible out-of-bounds write caused by a heap buffer overflow. The identified impact is local denial of service with user execution privileges required, and exploitation does not require user interaction. The description notes patches: ALPS1...
CVE-2026-20478
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10981454 Note: For MT6880, MT6890, MT6988, MT6990 / AUTO00851293...
GHSA-PJHX-3C3W-9V23 API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate
Impact ApiPropertysecurity: ... is evaluated per request to decide whether a property is exposed. The componentsCache arrays in ApiPlatform\JsonApi\Serializer\ItemNormalizer and ApiPlatform\Hal\Serializer\ItemNormalizer are keyed on $context'cachekey', which is set unconditionally before delegati...
PYSEC-2026-2803 Out-of-bounds Read in OpenCV
OpenCV 4.1.1 has an out-of-bounds read in halbaseline::vload in core/hal/intrinsse.hpp when called from computeSSDMeanNorm in modules/video/src/disflow.cpp...