CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC Empecemos decidiendo una imagen base. La disposición de las bibliotecas en el sistema depende de cuál sea. Por ejemplo, para alpine será /usr/lib64/, para ubuntu será /usr/lib/x8664-linux-gnu. Usaremos ubuntu como imagen base. root@kitploit: FROM ubuntu El nvidia...

Guardrails

NVIDIA NeMo Guardrails Library LATEST RELEASE / DEVELOPMENT VERSION : The develop branch tracks the latest top of tree development. The latest released version is 0.23.0. ✨✨✨ 📌 The official NeMo Guardrails library documentation is available atdocs.nvidia.com/nemo/guardrails. ✨✨✨ NVIDIA NeMo...

SkillSpector

SkillSpector Escáner de seguridad para skills de agentes de IA. Detecta vulnerabilidades, patrones maliciosos y riesgos de seguridad antes de instalar skills de agentes. Descripción general Las skills de agentes de IA utilizadas por Claude Code, Codex CLI, Gemini CLI, etc. se ejecutan con confian...

CVE-2019-5700

CVE-2019-5700 Unfortunately, I don't have a trendy and clever name for this vulnerability. This bug is fairly simple to exploit. I actually sat on it for quite a while until I realized this might affect more devices than I initially thought. Scope: This bug affects Nvidia Tegra t114-t210 SoCs tha...

sass-king

SASS King Ingeniería inversa de SASS de NVIDIA desde kernels controlados hasta auditorías de producción. Artículo 1 · Artículo 2 · Base de conocimiento · Biblioteca de patrones · Glosario de instrucciones SM120 · Notas de codificación · Empezar aquí · Estructura del proyecto · Capítulos de núcleo...

NemoClaw

NVIDIA NemoClaw: Pila de Referencia para Agentes de IA en Entornos Aislados en OpenShell NVIDIA NemoClaw es una pila de referencia de código abierto para ejecutar agentes de IA siempre activos de manera más segura dentro de sandboxes de NVIDIA OpenShell. Proporciona una incorporación guiada, un...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

CVE-2022-34683

CVE-2022-34683 El controlador de pantalla GPU NVIDIA para Windows contiene una vulnerabilidad en el manejador de la capa de modo kernel nvlddmkm.sys para DxgkDdiEscape, donde ocurre una desreferencia de puntero nulo, lo que puede provocar una denegación de servicio. autenticación| complejidad|...

GreenSection

GreenSection Nvidia GreenSection Memory Corruption 0day vulnerability Multiple NVIDIA user mode components shares a global memory section in \BaseNamedObjects\52813408-3561-4705-820a-2b3b78be92ba with full R/W access to everyone, this section stores important data structures inside but there are...

hashcrack

hashcrack unpacks some hash types, picks sensible options and invokes hashcat NVIDIA drivers here: http://www.nvidia.co.uk/Download/index.aspx?lang=en-uk alt email: [email protected] if you need support I'm not sure if anyone at NCC will be looking after this, but I'll be doing active dev in...

Flowise - NVIDIA NIM Endpoints Missing Authentication

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, the NVIDIA NIM router /api/v1/nvidia-nim/ is whitelisted in the global authentication middleware, allowing unauthenticated access to privileged container management and token generati...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

poc-cve-2024-0132

poc-cve-2024-0132 再現環境: os: nvidiaドライバーを搭載したubuntu 22.04 docker: v27.1.0 nvidia-container-toolkit: v1.16.1 再現手順: pocコンテナイメージを実行する 目標: コンテナ内でホストのファイルにアクセスする コンテナ内のdocker.sockを介してdockerデーモンのAPIを呼び出す 再現 ビルド済みのpocイメージ ssst0n3/poc-cve-2024-0132 を使用するか、自分でソースからビルドしてください。 root@kitploit: root@wanglei-gpu...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity reports a possible buffer overflow issue. However, given the ‘static’ scope of nvidiasetupi2cbus, it seems that this issue cannot occur after examining the...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Fully Weaponized NVIDIA Container Toolkit Exploit References https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

basalt

...

CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...

CVE-2023-31014_Lab

CVE-2023-31014 Implicit Intent Hijacking Lab An educational Android Lab created based on the public report of CVE-2023-31014 in NVIDIA GeForce NOW for Android. It does not include NVIDIA source code, actual Action strings, or real authentication credentials. Facts confirmed from the public report...