2432 matches found
CVE-2026-20687-AppleJPEGDriver-UAF
CVE-2026-20687 — استغلال UAF في مهلة startDecoder في AppleJPEGDriver CVE-2026-20687 · Enfilade · enfilade.io المكوّن: Kernel التأثير: قد يتمكن تطبيق من التسبب في إنهاء غير متوقع للنظام أو كتابة في ذاكرة kernel. الوصف: تمت معالجة مشكلة استخدام بعد التحرير use after free من خلال تحسين إدارة الذاكرة...
CVE-2026-38053---Remove-PPL
CVE-2026-38053---Remove-PPL BYOVD que remove PPL para 24H2 e 25H2 Uma escrita arbitrária de memória no handler do IOCTL 0x12C807 METHODNEITHER do Wise System Monitor v1.5.3.127 permite que atacantes causem a remoção de PPL ou negação de serviço DoS por meio de uma entrada manipulada. Informações...
CVE-2024-2887
CVE-2024-2887 这是关于 CVE-2024-2887 的简短撰写说明，我利用此漏洞获得了 V8CTF M123 的奖励。 当定义的类型数超过 kV8MaxWasmTypes（可通过在 RecGroup 中填充更多类型来实现）时，类型索引可能超过 20 位并发生溢出。这样，两个具有相同 heaptype 的类型可能被视为相同。 我们可以通过创建一个包含 ref 对象的数组并使用 float64 数组读取来获得 addrof 原语，以及通过创建 float64 数组并将其作为对象读取来获得 fakeobj 原语。 wasm 模块的构建器如下所示： root@kitploit:...
CVE-2017-5123
CVE-2017-5123 Escalação de privilégios no Linux explorando a chamada de sistema waitid. O exploit é trazido a você por @XeR0x2A e @chaignc do HexpressoTeam apenas para fins educacionais. O bug foi introduzido em 21/05/2017 e corrigido em 09/10/2017, sabendo-se que 4.14.0-rc4+ está vulnerável...
cve-2014-0038
Локальный root-эксплойт для CVE-2014-0038 Ошибка: Системный вызов X86X32 recvmmsg неправильно проверяет указатель тайм-аута, передаваемый из пользовательского пространства. Примитив эксплойта: Передача указателя на адрес ядра в качестве тайм-аута для recvmmsg. Если исходный байт по этому адресу...
CVE-2017-5123
README ملاحظة : الكود الموجود في هذا المستودع مخصص لعرض عزل تقنيات حاويات الرمل الآمنة مثل kata containers ولا يقصد مهاجمة أي منصات. كيفية إعادة الإنتاج احصل على نواة لينكس 4.13.0 طبّق الرقعة 0001-CVE-2017-5123-help-to-make-attack-safely.patch ابنِ نواة لينكس باستخدام الإعداد Kconfig أقلع النواة...
CVE-2017-16995
L'ultima versione di Ubuntu Ubuntu 16.04 presenta una vulnerabilità ad alto rischio di elevazione locale dei privilegi, identificata con il codice CVE-2017-16995. La vulnerabilità risiede nel kernel Linux che richiama eBPF bpf2; quando un utente fornisce un programma BPF dannoso che induce un...
CVE-2026-64705
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory...
CVE-2026-64705
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory...
CVE-2012-6422
Exploit Exynos Questa è una POC per sfruttare la vulnerabilità /dev/exynos-mem introdotta nei vecchi smartphone Samsung. È stata realizzata per interesse nella ricerca sulle vulnerabilità del kernel e come parte di una sfida CTF. L'Exploit La vulnerabilità introdotta in questi telefoni sono i...
CVE-2026-12166_CVE-2026-12167_CVE-2026-12168
Vulnerabilità multiple di escalation dei privilegi locali nel driver Little Orbit GFAC GFACSysx64.sys | ---|--- ID CVE| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Fornitore| Little Orbit Prodotto| Driver GamersFirst Anti-Cheat GFAC GFACSysx64.sys Versioni interessate| Nessuna informazione sul...
RtlHijack
RtlHijack Un repository con script per dimostrare primitive di lettura e scrittura alternative utilizzando le funzioni Rtl in modo non convenzionale. RtlFillMemory.c RtlFillMemory accetta tre argomenti: un puntatore alla memoria di destinazione, il numero di byte da scrivere e un singolo valore...
GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...
php-bypass-disable-functions
php-bypass-disable-functions Demo-Projekt, das zeigt, wie die Sicherheitskontrolle disablefunctions von PHP unter Linux umgangen werden kann, wo Prozesse ihren eigenen Speicher über die spezielle Datei /proc/self/map mithilfe von Standard-Dateioperationen open/seek/read/write einsehen und sogar...
BIT-POSTGRESQL-2026-14679 PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory
Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected...
CVE-2026-8917
CVE-2026-8917 — An untrusted pointer dereference via an IOCTL affects ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll . The vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. According to the provided ...
Exploit for CVE-2025-7771
CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...
CVE-2026-21072
A local attacker with low privileges can trigger out-of-bounds memory writes via the VC1 codec in libsavsvc.so on Samsung devices prior to the August 2026 Security Maintenance Release. NVD rates this HIGH (7.8), while Samsung's CNA rates it MEDIUM (5.1). No exploitation evidence is provided. Appl...
