CVE-2024-1642470

Уязвимость удалённого выполнения кода в драйвере USB Generic Parent Driver Windows CVE-2024-1642470 Обзор Этот репозиторий содержит код эксплойта PoC и скрипт обнаружения для уязвимости удалённого выполнения кода в драйвере USB Generic Parent Driver Windows, идентифицированной как CVE-2024-164247...

CVE-2021-38304-PoC

CVE-2021-38304 Доказательство концепции Обзор Этот репозиторий содержит доказательство концепции критической уязвимости безопасности в старых версиях драйвера nipalk.sys от National Instruments. Уязвимость позволяет выполнять произвольный код и раскрывать память в режиме ядра. Он предназначен...

EUVD-2026-59659

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions custom...

CVE-2026-72091 accel/amdxdna: reject user command submission without a command BO

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

CVE-2026-68179

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...

CVE-2026-15449 TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption

A time-of-check to time-of-use TOCTOU flaw in the illumos data-link pseudo-driver dld affects handling of the DLDIOCGETMACPROP and DLDIOCSETMACPROP ioctls on /dev/dld. drviocpropcommon in usr/src/uts/common/io/dld/dlddrv.c copies the dldiocmacpropt ioctl header in once to read its prvalsize field...

CVE-2026-25266

Memory corruption while processing IOCTL command when device is in power-save state...

CVE-2025-59610

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer...

CVE-2025-53966

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message...

CVE-2025-53966

The CVE-2025-53966 issue affects Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. It is caused by incorrect handling of NL80211 vendor commands, leading to a buffer overflow during IOCTL message processing. Publicly available details in the connected documents confirm the affected SKUs...

CVE-2025-47387

Memory Corruption when processing IOCTLs for JPEG data without verification...

CVE-2025-40117

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...

CVE-2025-27048 Untrusted Pointer Dereference in Camera

Memory corruption while processing camera platform driver IOCTL calls...

EUVD-2019-1815

Malware in sbrugna...

EUVD-2007-2169

Malware in sbrugna...

EUVD-2016-5307

Malware in sbrugna...

EUVD-2019-8829

Malware in sbrugna...

EUVD-2021-8957

Malicious code in bioql PyPI...

CVE-2019-1010066

Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...

CVE-2019-19197

IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402401 using METHODNEITHER results in a read primitive...