55 matches found
CVE-2018-19323
CVE-2018-19323：技嘉 GDrv 利用框架 概述 本仓库包含针对 CVE-2018-19323 的完整高级利用框架，该漏洞存在于技嘉 gdrv.sys 驱动中。此漏洞允许无特权用户读写任意模型特定寄存器（MSR），从而导致完整的 Ring-0（内核）沦陷，并将权限提升至 NT AUTHORITY\SYSTEM。 该框架设计为模块化、健壮且功能丰富，为安全研究、红队行动和漏洞分析提供了全面的工具。 主要特性 完整内核利用： 通过泄露 IA32LSTAR MSR 获得内核基址并执行令牌窃取 shellcode，实现权限提升。 多架构支持： 动态适配 x86 、x64 和 ARM6...
CVE-2025-66678
CVE-2025-66678 在 Hardware Read & Write Utility v1.25.11.26 中，驱动程序通过 MmMapIoSpace 暴露了任意的 MSR 读写以及物理内存读写，两者均可实现内核代码执行。 PoC 详情 该 PoC 将通过交换当前进程的主令牌，使其成为 NT Authority\SYSTEM。 使用方法 1. 将易受攻击的驱动程序放置在 C:\Users\Public 目录下 2. 以管理员身份运行漏洞利用程序 注意：本项目中不会共享该易受攻击的驱动程序。 示例输出 读写 MSR 读写物理内存 免责声明...
imMapper
imMapper Una demostración sobre cómo abusar del controlador vulnerable AmdTools64. El controlador tiene la capacidad de solo Leer/Escribir Memoria del Espacio del Kernel, así como Leer/Escribir el MSR. Esto requiere Privilegios de Administrador. El controlador se distribuye a través de la...
CVE-2018-1932X
CVE-2018-1932X（Rust 漏洞利用 PoC）针对 GIGABYTE APP Center v1.05.21 及更早版本 仅仅因为你的目标内存不安全，并不代表你的漏洞利用也必须不安全！ 使用的漏洞： CVE-2018-19320 - ring0 memcpy-like 功能 CVE-2018-19323 - 读写机器特定寄存器 MSRs。 测试环境： 20H1：Windows 10 Kernel Version 19041 MP 1 procs Free x64 参考资源 Vergilius 项目：内核结构 技嘉补丁公告 KPCR 详情 环境要求 仅支持 x64...
Lenovo-CVE-2025-8061
CVE-2025-8061 es una vulnerabilidad de escalada de privilegios en el controlador LnvMSRIO.sys de Lenovo. El controlador expone manejadores de IOCTL que permiten a cualquier proceso en modo usuario incluyendo usuarios sin privilegios realizar lo siguiente: Leer/escribir arbitrariamente Registros...
CVE-2026-80115
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation and denial-of-service vulnerability in DirectIo64.sys that allows local attackers to read arbitrary Model-Specific Registers or write zero to a...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Fixed an access error when accessing the IA32PMCxCFGB MSRs When running perffuzzer on PTL, sometimes the “unchecked MSR access error” is observed when accessing the IA32PMCxCFGB MSRs. 55.611268 Unchecked MSR...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fixed an unchecked MSR access error related to HSW. The fuzzer triggers the following trace: 7763.384369 Unchecked MSR access error: WRMSR to 0x689 attempted to write 0x1fffffff8101349e at rIP:...
CVE-2026-4483
An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGeneralIo, exposes IOCTL methods that permit direct read and write access to MSR and system memory. A local attacker wit...
CVE-2026-4483
The CVE-2026-4483 vulnerability affects the Moxa MxGeneralIo utility on industrial x86 computers. It exposes IOCTL interfaces that permit direct read/write access to MSR and system memory, creating a high-privilege local attack surface. According to the description, a local attacker with high pri...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001047)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001047 advisory. arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS,...
CVE-2025-14252
An Improper Access Control vulnerability in Advantech SUSI driver susi.sys allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior...
CVE-2025-14252
An Improper Access Control vulnerability in Advantech SUSI driver susi.sys allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior...
SUSE CVE-2025-40122
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-40122
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-40122
CVE-2025-40122 relates to the Linux kernel perf_x86/intel PMU and the IA32_PMC_x_CFG_B MSR access error observed on PTL. The issue arises when configuring ACR (auto counter reload) masks via perf events: an incorrect check in intel_pmu_acr_late_setup() lets an invalid ACR counter mask be written ...
CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-40122: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
EUVD-2022-54667
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...