poc-cve-2024-0132

poc-cve-2024-0132 Reproduktionsumgebung: Betriebssystem: Ubuntu 22.04 mit Nvidia-Treiber docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduktionsschritt: Das PoC-Container-Image ausführen Ziel: Auf Host-Dateien im Container zugreifen Docker-Daemon-APIs über docker.sock im Container aufrufe...

CVE-2025-23266

CVE-2025-23266 Autor: Mark Mallia Plataforma-alvo: Ubuntu 22.04, FastAPI v2.4.3 → corrigido para v2.5.1 em 2025-10-02 1 – Em resumo: o que este ataque envolve A rotina parserequest do FastAPI copia os cabeçalhos de requisição HTTP para um pequeno buffer que reside na pilha do chamador. Se um...

CVE-2024-0132

CVE-2024-0132 PoC di CVE-2024-0132 Iniziamo scegliendo un'immagine di base. La disposizione delle librerie nel sistema dipende da quale sarà. Ad esempio, per alpine sarà /usr/lib64/, per ubuntu sarà /usr/lib/x8664-linux-gnu. Useremo ubuntu come immagine di base. root@kitploit: FROM ubuntu Il...

CVE-2019-5700

CVE-2019-5700 Leider habe ich keinen schicken und klugen Namen für diese Schwachstelle. Dieser Bug ist recht einfach auszunutzen. Ich habe ihn tatsächlich eine ganze Weile zurückgehalten, bis mir klar wurde, dass dies mehr Geräte betreffen könnte als ursprünglich angenommen. Betroffen: Dieser Bug...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Vollständig bewaffneter Exploit für das NVIDIA Container Toolkit Referenzen https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 é uma vulnerabilidade que eu submeti à NVIDIA PSIRT. Pessoalmente, ela pode levar a altos riscos de segurança em clusters HPC multi-inquilino, especialmente em plataformas de machine learning em nuvem. Este repositório simplesmente demonstra a vulnerabilidade em...

sass-king

SASS King Reverse engineering di NVIDIA SASS da kernel controllati a audit di produzione. Articolo 1 · Articolo 2 · Base di conoscenza · Libreria di pattern · Glossario istruzioni SM120 · Note di codifica · Inizia qui · Struttura del progetto · Capitoli tensor core · Contribuire SASS King è un...

CVE-2026-65099

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65090

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

EUVD-2026-66107

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...

EUVD-2026-66106

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability that allows a local attacker with low privileges to invoke a process that exposes sensitive information , leading to information disclosure . The CVSS 3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confident...

CVE-2026-65087

NVIDIA NemoClaw contains a vulnerability due to insufficiently protected credentials . A successful exploit could lead to information disclosure and data tampering . The CVSS 3.1 base score is 5.6 (Medium) , with a local attack vector , low attack complexity, low privileges required, and user int...

EUVD-2026-66105

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler that allows an OS command injection. A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS v3.1 base score is 6.8 (MEDIUM) with a vector of AV:N/AC:H/PR:L/UI:N/S:U/...