CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD Suppression de PPL pour 24H2 et 25H2 Une écriture mémoire arbitraire dans le gestionnaire de l'IOCTL 0x12C807 METHODNEITHER de Wise System Monitor v1.5.3.127 permet à un attaquant de provoquer une suppression de PPL ou un déni de service DoS via une entrée...

CVE-2017-5123

CVE-2017-5123 Повышение привилегий в Linux с помощью системного вызова waitid. Эксплойт предоставлен @XeR0x2A и @chaignc из HexpressoTeam только для образовательных целей. Ошибка была внесена 2017-05-21 и исправлена 2017-10-09; 4.14.0-rc4+ известен как уязвимый. asciicast Если у вас уровень...

RtlHijack

RtlHijack Репозиторий со скриптами для демонстрации альтернативных примитивов чтения и записи с использованием функций Rtl не по назначению. RtlFillMemory.c RtlFillMemory принимает три аргумента: указатель на целевую область памяти, количество записываемых байт и одно значение-байт. Записывает...

CVE-2026-48977

OpenSlide is a C library for reading whole slide image files. Versions 3.4.1 through 4.0.1 are affected by an arbitrary memory write vulnerability in parse_level0_xml() within src/openslide-vendor-ventana.c. A crafted Ventana BIF file can supply nonpositive row or column tile counts, producing at...

CVE-2026-48977 OpenSlide: Arbitrary memory write with crafted Ventana BIF file

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

CVE-2026-48977 OpenSlide: Arbitrary memory write with crafted Ventana BIF file

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memo...

php-bypass-disable-functions

php-bypass-disable-functions Projet de démonstration montrant comment contourner le contrôle de sécurité disablefunctions de PHP sur Linux, où les processus peuvent inspecter et même écrire leur propre mémoire via le fichier spécial /proc/self/map en utilisant des opérations standard sur les...

CVE-2026-20687-AppleJPEGDriver-UAF

CVE-2026-20687 — AppleJPEGDriver startDecoder Timeout UAF CVE-2026-20687 · Enfilade · enfilade.io Компонент: Ядро Воздействие: Приложение может вызвать непредвиденное завершение работы системы или запись в память ядра. Описание: Проблема использования после освобождения была устранена за счёт...

CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

ثغرات متعددة لتصعيد الامتيازات المحلية في برنامج تشغيل Little Orbit GFAC GFACSysx64.sys | ---|--- معرفات CVE| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 المورّد| Little Orbit المنتج| برنامج تشغيل GamersFirst Anti-Cheat GFAC GFACSysx64.sys الإصدارات المتأثرة| لا توجد معلومات إصدار مضمنة في ثنا...

CVE-2026-65357

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-65357

A memory handling flaw in Apple operating systems allows a local application to cause unexpected system termination or write kernel memory . The issue is addressed in iOS 26.6 , iPadOS 26.6 , macOS Tahoe 26.6 , tvOS 26.6 , visionOS 26.6 , and watchOS 26.6 . The CVSS 3.1 base score is 7.8 (HIGH) ,...

CVE-2026-65357

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

EUVD-2026-77883

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2024-2887

CVE-2024-2887 Ceci est un bref compte-rendu du CVE-2024-2887, que j'ai utilisé pour revendiquer V8CTF M123. Lorsque l'on définit plus de types que kV8MaxWasmTypes, ce qui peut être réalisé en ajoutant plus de types dans RecGroup, l'indice de type peut dépasser 20 bits et alors déborder. Ensuite,...

cve-2014-0038

Exploitation locale en root pour CVE-2014-0038 Bug : L'appel système X86X32 recvmmsg ne nettoie pas correctement le pointeur de timeout passé depuis l'espace utilisateur. Primitive d'exploitation : Passer un pointeur vers une adresse noyau comme timeout pour recvmmsg ; si l'octet original à cette...

Astra Linux – Vulnerability in PHP 7.3

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25, and 8.0.x below 8.0.12, when running PHP FPM SAPI with the main FPM daemon process running as the root user and child worker processes running as lower-privileged users, it is possible for the child processes to access memory...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: A missing return value check bug has been fixed. In the smb2sendinterimresp function, if ksmbdallocworkstruct fails to allocate a node, it returns a NULL pointer to the inwork pointer. This can lead to an illegal memory...

Astra Linux – Vulnerability in Chromium

In Google Chrome on Linux and ChromeOS before version 92.0.4515.107, an attacker who convinced a user to install a malicious extension could perform an out-of-bounds memory write by using a crafted HTML page. This vulnerability allowed the attacker to execute such an operation...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed the overloading of the meaning of MEMUNINIT Lonial reported an issue with the BPF verifier, where the checkmemsizereg function contains the following code: c if !tnumisconstreg-varoff / For unprivileged variable...

Astra Linux – Vulnerability in Chromium

Before version 91.0.4472.77, TabStrip in Google Chrome allowed an attacker who convinced a user to install a malicious extension to perform an out-of-bounds memory write through a crafted HTML page...