CVE-2018-4407

CVE-2018-4407 IOS/macOS сбой ядра Использование: python CVE20184407.py IP/CIDR python CVE20184407.py 192.168.1.1 python CVE20184407.py 192.168.1.0/24 1. найти iphone nmap -sS -p 62078 --open 192.168.1.0/24 2. атака python CVE20184407.py iphoneip...

CVE-2019-2215

CVE-2019-2215 Le problème suivant existe dans la branche android-msm-wahoo-4.4-pie de https://android.googlesource.com/kernel/msm et peut-être d'autres : Il y a une use-after-free du membre wait dans la structure binderthread du pilote binder situé dans /drivers/android/binder.c. Comme décrit dan...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...

cve-2022-21907

CVE-2022-21907 Application Golang par 1vere$k CVE-2022-21907 - Double Free dans le pilote http.sys. Résumé Il s'agit d'une application Golang multithread qui permet d'envoyer des requêtes sur plusieurs cibles simultanément. Peu efficace avec les requêtes POST, mais elle offre près de 30 % de...

CVE-2022-21907-http.sys

CVE-2022-21907 - Двойное освобождение в драйвере http.sys CVE-2022-21907 - Двойное освобождение в драйвере http.sys Краткое описание Неаутентифицированный злоумышленник может отправить HTTP-запрос с заголовком "Accept-Encoding", что вызывает двойное освобождение в неизвестном списке кодировок...

CVE-2021-30955-POC

CVE-2021-30955 POC Proof of concept упакованный в iOS-приложение для CVE-2021-30955 Вся заслуга принадлежит Jake James. Его код POC используемый в этом проекте можно найти здесь. Что это? Это демонстрация CVE-2021-30955 — ошибки iOS, которая позволяет приложению в пользовательском пространстве...

CVE-2022-26937

Preuve de concept de crash du système de fichiers réseau Windows CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a...

CVE-2018-4407

CVE-2018-4407 Plantage du noyau causé par une écriture hors limites dans le code de gestion des paquets ICMP d'Apple CVE-2018-4407 pour iOS 11.0，11.2，11.3.1...

check_icmp_dos-CVE-2018-4407-

Principe Le principe est de rendre les autres champs du paquet "icmp" illégaux. Lors de l'analyse par le noyau macOS ou iPhone, la vérification de la taille n'est pas implémentée, ce qui provoque un crash. Appareils 1. Apple iOS 11 et versions antérieures : tous les appareils 2. Apple macOS High...

CVE-2025-62470

Ceci n'est pas une exploitation, simple POC BUGCHECKCODE: 50 BUGCHECKP1: ffffc101f6bf91be BUGCHECKP2: 0 BUGCHECKP3: fffff8007e194409 BUGCHECKP4: 0 READADDRESS: ffffc101f6bf91be MMINTERNALCODE: 0 IMAGENAME: CLFS.SYS MODULENAME: CLFS FAULTINGMODULE: fffff8007e190000 CLFS PROCESSNAME:...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.5:CLSA-2026:1784274653)

"The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1784274653 advisory. - In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlancommonnewlink valis provided a...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1749480611)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749480611 advisory. - In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed Aft...

CVE-2026-100073

A flaw was found in the Linux kernel's ext4 file system. When saving modified memory pages back to storage, the system underestimates the journal transaction space required to split and update file block mappings. A local user could exploit this flaw by performing specific write operations,...

CVE-2026-100075

A flaw was found in the Linux kernel's SCSI Remote Direct Memory Access Protocol SRP target driver. When memory allocation fails while processing multi-buffer descriptors, the error-handling routine fails to reset internal tracking counters and leaves an invalid memory pointer. A remote client...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2026-97986

A flaw was found in the Linux kernel's virtioinput driver. A race condition during device removal can lead to a Denial of Service DoS via a kernel crash. Because the driver unregisters the input device before resetting the underlying virtual device, in-flight event callbacks may access freed devi...

CVE-2026-97978

A flaw was found in the Linux kernel's Intel Ethernet driver ice. Event tracing routines dereferenced internal data pointers when formatting log messages instead of capturing the necessary values when the event was recorded. A local user with administrative access or tracing privileges could...

CVE-2026-97942

A flaw was found in the Linux kernel's x86 instruction patching subsystem. A race condition between runtime instruction modification text poking and page attribute updates can cause virtual memory lookup failures in shared executable memory. A local user can trigger this issue during kernel modul...

CVE-2026-97489

A flaw was found in the Linux kernel's BFS Boot File System implementation. The kernel fails to properly verify the return value when setting the block size during a mount operation. A local user with permissions to mount file systems could exploit this issue by mounting an incompatible file syst...

CVE-2026-97927

A flaw was found in the Linux kernel's Unix File System UFS implementation. This vulnerability allows a local user to cause a Denial of Service DoS by mounting a specially crafted or corrupted file system image. During a failed mount operation, an improper cleanup sequence leads to a null pointer...