KillChain

KillChain ?? Aviso legal: Este proyecto está destinado estrictamente a fines educativos y de investigación en seguridad. El autor no es responsable de ningún uso indebido, daño o actividad ilegal causada por esta herramienta. Úsela únicamente en entornos de laboratorio aislados con permiso...

360WFP_Exploit

360WFPExploit 一个概念验证（PoC），演示对 360 安全卫士 WFP 驱动（360netmonx64wfp.sys） 接口的潜在滥用，旨在验证缺少调用者身份验证的 IOCTL 接口可能被第三方程序滥用的风险。 本项目仅用于安全研究和漏洞分析，禁止用于任何非法用途。 项目概述 在对 360 安全卫士网络监控驱动 360netmonx64wfp.sys 进行逆向分析时，发现以下行为： 该驱动向用户态暴露了两个设备对象： \.\360TdiFilter \.\360TdiSpeed 任何拥有管理员权限的进程均可通过 DeviceIoControl 访问这些设备对象...

CVE-2022-22077

✅ CVE-2022-22077 利用框架 RTCore64.sys： 本文档全面概述了 CVE-2022-22077 利用框架，这是一个针对 RTCore64.sys 驱动程序漏洞的高级 BYOVD（自带易受攻击驱动程序）攻击工具包。该框架展示了用于教育和安全研究目的的高级 Windows 内核利用技术。 涵盖内容包括漏洞的技术基础、框架架构以及与更广泛的 LazyOwn RedTeam 工具集的集成。有关详细的漏洞分析，请参阅漏洞分析。有关各个组件的具体实现细节，请参阅利用框架。 🚨 CVE-2022-22077 — MSI Center / Dragon Center — 通过...

Astra Linux – Vulnerability in Linux

A out-of-bounds memory write flaw was discovered in the Linux kernel’s joystick devices subsystem in versions prior to 5.9-rc1. This flaw allows a local user to crash the system or potentially escalate their privileges on the system. The greatest threat posed by this vulnerability is related to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ethtool: Fixed an issue where the uninitialized number of lanes was used. It is not possible to set the number of lanes when adjusting link modes using the legacy IOCTL ethtool interface. Since the structure struct...

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

EUVD-2025-210885

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

CVE-2025-51619

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

PT-2026-89122

A vulnerability in the Thesycon DPC Latency Checker driver dpc.sys thru 1.4.0 allows local unprivileged users to cause a denial-of-service BSOD condition on Windows systems. The driver exposes an IOCTL interface 0x81772008 that accepts user-controlled input without validating pointers before...

[SECURITY] [DSA 6462-1] zfs-linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6462-1 [email protected] https://www.debian.org/security/ Aron Xu August 24, 2026 https://www.debian.org/security/faq -...

UBUNTU-CVE-2026-74466

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions custom...

CVE-2026-64529 crypto: qat - remove unused character device and IOCTLs

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

PT-2026-64529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto ccp component where the system improperly initializes SNP for the ioctlSNP VLEK LOAD function. A userspace process could potentially trigger this code path...

CVE-2026-0125

In multiple functions of vpuioctl.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-46151

In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblpctrlmsg collapses the usbcontrolmsg return value to 0/-errno, discarding the actual number of bytes transferred. A broken printer can complete the GETDEVICE...

EUVD-2026-28603

In the Linux kernel, the following vulnerability has been resolved: spi: spidev: fix lock inversion between spilock and buflock The spidev driver previously used two mutexes, spilock and buflock, but acquired them in different orders depending on the code path: write/read: buflock - spilock ioctl...

CVE-2025-70795

STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...

Safetica Application 安全漏洞

Safetica Application is a corporate data leakage prevention and endpoint behavior control software developed by Safetica, Inc. Version 11.11.4.0 of Safetica Application contains a security vulnerability. This vulnerability stems from insufficient validation during the call to the driver’s IOCTL...