AmdRyzenMasterCheat

ECPRO-LAN Anti-Cheats: FACEIT, ESEA con versione personalizzata Inizio 2019 - fine 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requisiti: Windows 10 Enterprise 1607 LTSB con tutti gli aggiornamenti CPU AMD Ryzen Scheda madre B350-B450 client B550 è buggato Logitech GHUB installato per...

dtrace-memaccess_cve-2020-27949

Lettura e scrittura della memoria di altri processi tramite fasttrap Il dispositivo /dev/fasttrap per creare nodi trap nei processi in spazio utente per i provider pid e objc ha i permessi 666. A differenza di /dev/dtrace, anch'esso 666, fasttrap non dispone di un controllo dei permessi. Ciò...

CVE-2024-2887

CVE-2024-2887 Esta é uma breve descrição da CVE-2024-2887, que usei para reivindicar o V8CTF M123. Ao definir mais tipos do que kV8MaxWasmTypes, o que pode ser alcançado adicionando mais tipos em RecGroup, o índice de tipos pode ser maior que 20 bits e então transbordar. Então dois tipos podem se...

CVE-2025-65264

CVE-2025-65264 Descrizione In CPU‑Z 2.17 e versioni precedenti e altri prodotti che utilizzano il driver CPU-Z con versione 1.0.6.1 e precedenti, il driver ad esempio cpuz161.sys dereferenziava un valore da un indirizzo fornito dall'utente e lo scriveva nel buffer di sistema fornito dal chiamante...

MongoBleed-exploit

CVE-2025-14847: MongoBleed Labor logo.svg Inhaltsverzeichnis 1. Einführung 2. Schwachstellendetails Funktionsweise 3. Auswirkungen 4. Labor-Architektur 5. Voraussetzungen 6. Installation und Verwendung 1. Umgebung starten 2. Abhängigkeiten installieren 3. Labor-Setup überprüfen optional 4...

CVE-2014-0160

💔 CVE-2014-0160 — "Heartbleed" 📖 目录 概述 技术背景 根本原因 影响范围 受影响版本 利用概述 缓解与补丁 时间线 经验教训 总结 🔎 概述 Heartbleed 是 CVE-2014-0160 的俗称，是 OpenSSL 的 TLS 心跳扩展中的一个严重漏洞。 它允许远程攻击者无需认证即可从易受攻击的服务器每次请求读取最多 64 KB 的内存 。 这泄露了以下敏感信息： 🔐 私有 SSL 密钥 👤 用户凭证 🍪 会话 Cookie 📧 电子邮件 💳 内存中存储的敏感数据 🧠 技术背景 OpenSSL 实现了 TLS 协议，用于保护 HTTPS 连接。...

CVE-2025-67246

CVE-2025-67246 शीर्षक : लुडाशी में अनुचित पहुँच नियंत्रण प्रभावित संस्करण : 6.1026.4505.112 से पहले खोज तिथि : 2 दिसंबर, 2025 खोजकर्ता : झोउरुई विश्लेषण रिपोर्ट : लुडाशी एक प्रसिद्ध मुफ्त सिस्टम उपयोगिता सॉफ्टवेयर है जो मुफ्त हार्डवेयर प्रमाणीकरण, कंप्यूटर मोबाइल फोन स्थिरता आश्वासन और सिस्टम...

CVE-2020-8277

CVE-2020-8277 Nur zu Bildungszwecken. Schnellstart root@kitploit: dieses Repository klonen $ git clone https://github.com/masahiro331/CVE-2020-8277 bind starten $ docker build -t bind-local ./bind TCP-Fallback erforderlich $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind Verwenden Sie...

CVE-2021-28476

CVE-2021-28476: Eine "Microsoft Hyper-V Remote Code Execution Vulnerability" von Gast zu Host in vmswitch.sys. Dies ist ein Proof of Concept für CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", einen beliebigen Speicherlesevorgang in vmswitch.sys...

GhostKatz

GhostKatz Estrai le credenziali LSASS direttamente dalla memoria fisica abusando di driver vulnerabili firmati con primitive di lettura della memoria fisica tramite MmMapIoSpace, bypassando le capacità di rilevamento tradizionali in modalità utente. Questo strumento è stato sviluppato in...

CVE-2017-16995

भेद्यता विवरण Ubuntu एक ओपन-सोर्स GNU/Linux ऑपरेटिंग सिस्टम है जो मुख्य रूप से डेस्कटॉप अनुप्रयोगों पर केंद्रित है और Debian GNU/Linux पर आधारित है। हाल ही में एक व्हाइट-हैट हैकर ने Ubuntu के नवीनतम संस्करण Ubuntu 16.04 में एक स्थानीय विशेषाधिकार वृद्धि भेद्यता local privilege escalation...

EXP-CVE-2017-75

EXP-CVE-2017-75 Этот скрипт на Python предназначен для проверки и эксплуатации определенной уязвимости в серверах NGINX известной как CVE-2017-75. Он был разработан для программы публичного раскрытия уязвимостей, в которую я недавно отправил отчет. Он использует специально сформированный заголово...

CVE-2026-79112

A flaw was found in Skia, a 2D graphics library, within Google Chrome. This out-of-bounds read vulnerability could be exploited by a remote attacker who has already compromised the browser's renderer process. By presenting a specially crafted HTML page, the attacker could read sensitive memory...

CVE-2026-79045

A flaw was found in the V8 JavaScript engine within Chromium. A remote attacker could exploit a type confusion vulnerability by leveraging social engineering tactics and enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory within the...

DEBIAN-CVE-2026-78914

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-79112

Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-79148

Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

DEBIAN-CVE-2026-79223

Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. Chromium security severity: Low...

CVE-2026-14960-CVE-2026-14961

Vulnerabilità di escalation dei privilegi nel driver Pegatron TdeIo64 tdeio64.sys | ---|--- ID CVE| CVE-2026-14960, CVE-2026-14961 Produttore| Pegatron Corporation Prodotto| Driver TdeIo tdeio64.sys Interfaccia di dispositivo| \.\TdeIo Tipi di vulnerabilità| Controllo degli accessi improprio...

CVE-2025-24204

CVE-2025-24204 Informazioni CVE-2025-24204 è una vulnerabilità che consente di leggere la memoria di qualsiasi processo su sistemi macOS con SIP attivo. La causa principale di questa vulnerabilità deriva dall'aggiunta di un'entitlement eccessivamente potente com.apple.system-task-ports.read al...