Lucene search
+L

350 matches found

Kitploit
Kitploit
added 2026/08/27 3:09 a.m.2 views

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

7.8CVSS7.5AI score0.00456EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/27 12:24 a.m.3 views

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Leitura/Escrita Não Autenticada de Memória do Kernel via ioctls de Debug CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Descobridor : Daniil Gordeev Divulgado : 2026-05-03 Resumo O driver de kernel Wi-Fi rtl8192cd no "Jungle SDK" fora da árvore d...

7.7CVSS5.6AI score0.00669EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 11:17 p.m.2 views

CVE-2025-8061-Exploit

Exploit CVE-2025-8061 Visão Geral Exploit de Prova de Conceito para LnvMSRIO.sys Driver MSR I/O da Lenovo, demonstrando leitura/escrita arbitrária de memória física e acesso à memória do kernel através da tradução VA-para-PA do Superfetch. Informações do Driver Propriedade| Valor ---|--- Nome do...

7.3CVSS7AI score0.00385EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 9:04 p.m.3 views

KslDump

KslDump - BMVD Bring the Microsoft Vulnerable Driver Contesto importante Ho segnalato il problema a Microsoft il 7 marzo 2026. Tuttavia, quasi 20 giorni prima, la comunità di hacking dei videogiochi lo aveva già invertito e discusso pubblicamente. Da parte mia, non seguo i loro progetti e non ero...

5.3AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 10:44 a.m.2 views

CVE-2021-21551

CVE-2021-21551 Einfacher PoC zur Ausnutzung von CVE-2021-21551 für LPE durch Starten von system cmd. https://vulners.com/cve/CVE-2021-21551 Es wurde ein Problem im signierten Dell-Windows-Treiber dbutil23.sys entdeckt, das zur Kompromittierung des gesamten lokalen Systems führen kann. Die...

8.8CVSS8AI score0.79249EPSS
SaveExploits18References1
RedhatCVE
RedhatCVE
added 2026/08/24 3:42 p.m.6 views

CVE-2026-74641

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

7.8CVSS5.5AI score0.00129EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/24 12:27 a.m.3 views

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – Confusion de type dans le vérificateur eBPF → Lecture/écriture mémoire noyau Vue d'ensemble Un débordement d'entier subtil dans le suivi des bornes du vérificateur eBPF permet à un attaquant de créer un programme eBPF qui accède à de la mémoire noyau hors limites. Sévérité :...

5.5AI score
SaveExploits2
CVE
CVE
added 2026/08/22 3:32 p.m.21 views

CVE-2026-74641

CVE-2026-74641 is a local privilege escalation / DoS flaw in the Linux kernel ALSA usx2y driver . The function snd_us428ctls_vm_fault() converts a page-fault offset into a kernel address without bounds-checking it against the single-page us428ctls_sharedmem region. Because file_mmap_size_max() re...

7.8CVSS5.5AI score0.00129EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/08/22 3:32 p.m.7 views

EUVD-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...

5.5AI score0.00129EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.14 views

PT-2026-79646

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd us428ctls vm fault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctls sharedmem + offset; page = virt to pagevaddr; get...

5.4AI score0.00129EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-74641

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset =...

7.8CVSS5.3AI score0.00129EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/11 6:17 p.m.15 views

CVE-2026-0465

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

5.6CVSS0.00114EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 5:11 p.m.10 views

EUVD-2026-56781

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

5.6CVSS5.3AI score0.00114EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 5:11 p.m.55 views

CVE-2026-0465

A Use‑After‑Free (UAF) in the AMD Ryzen Master Utility Driver is described as allowing a local attacker to access kernel memory, potentially causing a loss of availability. The affected component is the AMD Ryzen Master Utility Driver; the vulnerability is local, requires high privileges, and exe...

5.6CVSS5.3AI score0.00114EPSS
SaveExploits0References1
Amd
Amd
added 2026/08/11 12:00 a.m.12 views

AMD Ryzen™ Master Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-54512| A DLL hijacking vulnerability within the AMD Ryzen™ Master installation may allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...

7CVSS5.4AI score0.00117EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/27 8:13 p.m.10 views

EUVD-2026-49541

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An attacker may be able to cause unexpected system termination or read kernel memory...

5.8AI score0.00193EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/15 5:09 p.m.19 views

CVE-2026-14961

Pegatron Tdelo64.sys exposes a privileged device interface, \.\TdeIo, that fails to properly restrict access to sensitive IOCTL functionality. The driver's IOCTL dispatcher does not validate caller privileges or verify user-supplied kernel memory addresses before performing memory operations. By...

6.2CVSS6.2AI score0.00162EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/07/15 5:09 p.m.40 views

CVE-2026-14961 CVE-2026-14961

Pegatron Tdelo64.sys exposes a privileged device interface, \.\TdeIo, that fails to properly restrict access to sensitive IOCTL functionality. The driver's IOCTL dispatcher does not validate caller privileges or verify user-supplied kernel memory addresses before performing memory operations. By...

0.00162EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/07/15 5:09 p.m.21 views

EUVD-2026-44731

Pegatron Tdelo64.sys exposes a privileged device interface, \.\TdeIo, that fails to properly restrict access to sensitive IOCTL functionality. The driver's IOCTL dispatcher does not validate caller privileges or verify user-supplied kernel memory addresses before performing memory operations. By...

6.2CVSS6.2AI score0.00162EPSS
SaveExploits1References1
CERT
CERT
added 2026/07/15 12:00 a.m.32 views

Privilege escalation vulnerability via unprotected IOCTL interface in Pegatron Tdelo64.sys

Overview A privilege escalation vulnerability exists in the tdeio64.sys driver due to an unprotected input/output control IOCTL dispatch routine that fails to validate the origin and permissions of user-supplied requests. An unprivileged local attacker can abuse exposed IOCTL dispatch routines...

9.8CVSS6.2AI score0.00459EPSS
SaveExploits1
Rows per page
Query Builder