353 matches found
KslDump
KslDump - BMVD Bring the Microsoft Vulnerable Driver Important context I reported the issue to Microsoft on 7 March 2026. However, almost 20 days earlier, the game-hacking community had already reversed and publicly discussed it. From my side, I do not follow their projects and I was not aware of...
kur
kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...
CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write
6. CVE-2026-7878 – Confusión de Tipos del Verificador eBPF → Lectura/Escritura de Memoria del Kernel Resumen Un sutil desbordamiento de enteros en el seguimiento de límites del verificador eBPF permite a un atacante crear un programa eBPF que accede a memoria del kernel fuera de los límites...
CVE-2025-8061-Exploit
CVE-2025-8061 Exploit Overview Proof-of-Concept exploit for LnvMSRIO.sys Lenovo MSR I/O Driver, demonstrating arbitrary physical memory read/write and kernel memory access via Superfetch VA-to-PA translation. Driver Information Property| Value ---|--- Driver Name| LnvMSRIO.sys Device Name|...
CVE-2021-21551
CVE-2021-21551 Simple PoC for exploiting CVE-2021-21551 for LPE by spawning system cmd. https://vulners.com/cve/CVE-2021-21551 An issue was discovered in signed dell windows driver dbutil23.sys which may lead to compromisation of whole local system. Driver's ioctl dispatch routine lacks of...
evil-mhyprot-cli
evil-mhyprot-cli إثبات مفهوم PoC لبرنامج التشغيل الضعيف Mhyprot2.sys الذي يسمح بقراءة/كتابة الذاكرة في النواة/المستخدم عبر عملية مستخدم غير مميزة. libmhyprot Wiki نظرة عامة ما يمكننا القيام به مع هذه الأداة هو كما يلي: قراءة/كتابة أي ذاكرة نواة بصلاحيات النواة من وضع المستخدم قراءة/كتابة أي ذاكرة...
CVE-2026-36355
CVE-2026-36355: Realtek rtl819x Jungle SDK - Lectura/Escritura no autenticada de memoria del kernel mediante ioctls de depuración CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Descubridor : Daniil Gordeev Divulgado : 2026-05-03 Resumen El controlador de kernel Wi-Fi rtl8192cd del "Jungle...
cheat-engine-undetectable
Cheat Engine Undetectable Academic Research Edition — Modified Cheat Engine with multi-tiered anti-cheat evasion for cybersecurity education and university-level reverse engineering research. Disclaimer: This project is exclusively for academic research, university coursework, and cybersecurity...
CVE-2026-74641
A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fixed the loop termination condition in gssfreeintokenpages. The intoken-pages array is not NULL-terminated. This results in the following KASAN issue: KASAN: Potential wild-memory-access in the range...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
KGDB and KDB allow read and write access to kernel memory, and therefore should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger, so it is important that the debugger respects the lockdown mode when/if it is triggered. CVSS 3.1 Base Score: 6.7...
CVE-2026-74641
CVE-2026-74641 is a local privilege escalation / DoS flaw in the Linux kernel ALSA usx2y driver . The function snd_us428ctls_vm_fault() converts a page-fault offset into a kernel address without bounds-checking it against the single-page us428ctls_sharedmem region. Because file_mmap_size_max() re...
EUVD-2026-64578
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...
PT-2026-79646
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd us428ctls vm fault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctls sharedmem + offset; page = virt to pagevaddr; get...
Linux Distros Unpatched Vulnerability : CVE-2026-74641
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset =...
CVE-2026-0465
A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...
CVE-2026-0465
A Use‑After‑Free (UAF) in the AMD Ryzen Master Utility Driver is described as allowing a local attacker to access kernel memory, potentially causing a loss of availability. The affected component is the AMD Ryzen Master Utility Driver; the vulnerability is local, requires high privileges, and exe...
EUVD-2026-56781
A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...
AMD Ryzen™ Master Vulnerability
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-54512| A DLL hijacking vulnerability within the AMD Ryzen™ Master installation may allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...
EUVD-2026-49541
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An attacker may be able to cause unexpected system termination or read kernel memory...