sgxray

SGXRay: SGXアプリケーションの脆弱性検出の自動化 Intel...

attackintel

更新（2018年11月26日） MITRE已弃用ATT&CK API功能，并将在不久后逐步淘汰。他们已转向使用STIX。我的代码仍可供参考，但你可以查看我处于初步开发阶段的ATT&CK Intel Webapp，它提供相同的信息。链接如下。我始终在寻求改进。如果你对Webapp有建议，请发送至gr4ym4ntxatgmaildotcom。享受吧。 ATT&CK INTEL Webapp ATT&CK Intel 一个简单的Python脚本，用于查询MITRE ATT&CK API，获取特定威胁组织的战术、技术、缓解措施和检测方法。 目标 快速获取特定威胁来自MITRE ATT&CK...

lvi-lfb-attack-poc

LVI-LFB控制流劫持攻击（CVE-2020-0551）的PoC 本仓库包含LVI-LFB控制流劫持攻击PoC的源代码。 内容 lvi-cfh-poc - 通过行填充缓冲区喷射劫持另一个进程的控制流 白皮书 前提条件 1. Visual Studio 2015 2. 存在漏洞的Intel CPU 作者 Andrei Vlad LUȚAȘ Dan Horea LUȚAȘ 附加资源...

iGPU-Leak

CVE-2019-14615: iGPU-Leak 漏洞 Wenjian He, Wei Zhang, Sharad Sinha 和 Sanjeev Das。iGPU Leak: An Information Leakage Vulnerability on Intel Integrated GPU。发表于第25届亚洲及南太平洋设计自动化会议（ASP-DAC'20）。 查看 PDF 查看幻灯片 发生了什么？ 在 Intel 集成 GPU（iGPU）上发现了一个安全问题。 它允许攻击者从 iGPU 泄露私有数据。 除了游戏，如今大量软件利用 GPU 加速，例如网页浏览器和区块链。...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 本地权限提升 PoC 概述 本项目是针对驱动 iqvw64e.sys（SHA256：37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9）中一个本地权限提升（LPE）漏洞的教育性概念验证——该驱动是英特尔以太网诊断驱动程序，关联 CVE-2015-2291 。 在见到该驱动被内核级加载器（如 KDMapper ）利用后，我想自己逆向它，以了解 IOCTL 分发的工作原理...

amthoneypot

针对英特尔 AMT 固件漏洞 CVE-2017-5689 的蜜罐。 监听 TCP 端口的 Web 服务器 - 以守护进程运行于 16922 端口。复制英特尔 AMT 管理服务的行为。 守护进程化 构建 - go build server.go 运行 - ./server logfile.txt 待办事项 添加模板以让内容动态/随机 添加错误检查 添加某种形式的远程代码执行（RCE）？...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2025_12753)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202512753 advisory. kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in...

CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl (CENTOS8.5:CLSA-2026:1789116715)

The CentOS Linux 8.5 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789116715 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl (CENTOS8.4:CLSA-2026:1789116898)

The CentOS Linux 8.4 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789116898 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

Rocky Linux 9 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlba-2025_9433)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlba-20259433 advisory. The microcodectl packages provide microcode updates for Intel and AMD processors. Bug Fixes and Enhancements: Update microcodectl to latest upstream...

CentOS Linux 8.5 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1754381826)

The CentOS Linux 8.5 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1754381826 advisory. - Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enab...

CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1754381424)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1754381424 advisory. - Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enab...

CentOS Linux 8.4 [TuxCare] Security Update: microcode_ctl Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1770214396)

The CentOS Linux 8.4 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1770214396 advisory. - Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation...

Rocky Linux 10.2 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2026_67979)

The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667979 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

CentOS Linux 8 [TuxCare] Security Update: microcode_ctl (CENTOS-STREAM8:CLSA-2026:1789117244)

The CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1789117244 advisory. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of...

Rocky Linux 9 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2026_68011)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202668011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

Rocky Linux 8 [CIQ] Security Update: microcode_ctl Multiple Vulnerabilities (crlsa-2026_65147)

The Rocky Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665147 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_12752)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202512752 advisory. kernel: HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove CVE-2025-21928 kernel: memstick: rtsxusbms: Fix slab-use-after-free in...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-97976

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate the packet length received from the hardware buffer before copying data. A compromised or malicious Bluetooth device providing an oversized packet length can trigger an out-of-bounds memory read,...