51 matches found
Lenovo-CVE-2025-8061
CVE-2025-8061 是联想 LnvMSRIO.sys 驱动程序中的一个权限提升漏洞。该驱动程序暴露了 IOCTL 处理程序，允许任何用户态进程（包括非特权用户）执行以下操作： 读/写任意模型特定寄存器（MSR） 读/写任意物理内存 这使标准用户获得完整的内核读/写能力，从而导致： KASLR 绕过（通过 IA32LSTAR） 直接内核代码执行（通过劫持 IA32LSTAR） 等等:3...
CVE-2018-19323
CVE-2018-19323：技嘉 GDrv 利用框架 概述 本仓库包含针对 CVE-2018-19323 的完整高级利用框架，该漏洞存在于技嘉 gdrv.sys 驱动中。此漏洞允许无特权用户读写任意模型特定寄存器（MSR），从而导致完整的 Ring-0（内核）沦陷，并将权限提升至 NT AUTHORITY\SYSTEM。 该框架设计为模块化、健壮且功能丰富，为安全研究、红队行动和漏洞分析提供了全面的工具。 主要特性 完整内核利用： 通过泄露 IA32LSTAR MSR 获得内核基址并执行令牌窃取 shellcode，实现权限提升。 多架构支持： 动态适配 x86 、x64 和 ARM6...
CVE-2025-66678
CVE-2025-66678 在 Hardware Read & Write Utility v1.25.11.26 中，驱动程序通过 MmMapIoSpace 暴露了任意的 MSR 读写以及物理内存读写，两者均可实现内核代码执行。 PoC 详情 该 PoC 将通过交换当前进程的主令牌，使其成为 NT Authority\SYSTEM。 使用方法 1. 将易受攻击的驱动程序放置在 C:\Users\Public 目录下 2. 以管理员身份运行漏洞利用程序 注意：本项目中不会共享该易受攻击的驱动程序。 示例输出 读写 MSR 读写物理内存 免责声明...
imMapper
imMapper 一个演示如何滥用易受攻击的驱动程序 AmdTools64 的示例。该驱动程序具有（仅）读写内核空间内存以及读写 MSR 的能力。这需要管理员权限。该驱动程序通过工具 RGBFusion-2 分发。 感叹号 本演示仅用于学习目的，我不鼓励滥用此漏洞。截至 2026 年 8 月 25 日，尚无有效的 CVE，也没有正在进行的申请，任何未来的 CVE 都不会归属于原作者，即我本人。 问号 我在翻阅 Discord 上较早的私信时偶然发现了这个驱动程序，我找到了一条来自 sigwl...
CVE-2018-1932X
CVE-2018-1932X（Rust 漏洞利用 PoC）针对 GIGABYTE APP Center v1.05.21 及更早版本 仅仅因为你的目标内存不安全，并不代表你的漏洞利用也必须不安全！ 使用的漏洞： CVE-2018-19320 - ring0 memcpy-like 功能 CVE-2018-19323 - 读写机器特定寄存器 MSRs。 测试环境： 20H1：Windows 10 Kernel Version 19041 MP 1 procs Free x64 参考资源 Vergilius 项目：内核结构 技嘉补丁公告 KPCR 详情 环境要求 仅支持 x64...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: perf/x86/intel: Fixed an access error when accessing the IA32PMCxCFGB MSRs When running perffuzzer on PTL, sometimes the “unchecked MSR access error” is observed when accessing the IA32PMCxCFGB MSRs. 55.611268 Unchecked MSR...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fixed an unchecked MSR access error related to HSW. The fuzzer triggers the following trace: 7763.384369 Unchecked MSR access error: WRMSR to 0x689 attempted to write 0x1fffffff8101349e at rIP:...
CVE-2026-4483
An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGeneralIo, exposes IOCTL methods that permit direct read and write access to MSR and system memory. A local attacker wit...
CVE-2026-4483
The CVE-2026-4483 vulnerability affects the Moxa MxGeneralIo utility on industrial x86 computers. It exposes IOCTL interfaces that permit direct read/write access to MSR and system memory, creating a high-privilege local attack surface. According to the description, a local attacker with high pri...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001047)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001047 advisory. arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS,...
CVE-2025-14252
An Improper Access Control vulnerability in Advantech SUSI driver susi.sys allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior...
CVE-2025-14252
An Improper Access Control vulnerability in Advantech SUSI driver susi.sys allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior...
SUSE CVE-2025-40122
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-40122
CVE-2025-40122 relates to the Linux kernel perf_x86/intel PMU and the IA32_PMC_x_CFG_B MSR access error observed on PTL. The issue arises when configuring ACR (auto counter reload) masks via perf events: an incorrect check in intel_pmu_acr_late_setup() lets an invalid ACR counter mask be written ...
CVE-2025-40122
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
CVE-2025-40122 perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32PMCxCFGB MSRs access error When running perffuzzer on PTL, sometimes the below "unchecked MSR access error" is seen when accessing IA32PMCxCFGB MSRs. 55.611268 unchecked MSR access error: WRMSR to 0x1986...
EUVD-2022-54667
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...
EUVD-2016-5430
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414614)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414614 advisory. arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are...