poc-cve-2024-0132

poc-cve-2024-0132 Reproduktionsumgebung: Betriebssystem: Ubuntu 22.04 mit Nvidia-Treiber docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduktionsschritt: Das PoC-Container-Image ausführen Ziel: Auf Host-Dateien im Container zugreifen Docker-Daemon-APIs über docker.sock im Container aufrufe...

CVE-2025-23266

CVE-2025-23266 Autor: Mark Mallia Plataforma-alvo: Ubuntu 22.04, FastAPI v2.4.3 → corrigido para v2.5.1 em 2025-10-02 1 – Em resumo: o que este ataque envolve A rotina parserequest do FastAPI copia os cabeçalhos de requisição HTTP para um pequeno buffer que reside na pilha do chamador. Se um...

CVE-2024-0132

CVE-2024-0132 PoC di CVE-2024-0132 Iniziamo scegliendo un'immagine di base. La disposizione delle librerie nel sistema dipende da quale sarà. Ad esempio, per alpine sarà /usr/lib64/, per ubuntu sarà /usr/lib/x8664-linux-gnu. Useremo ubuntu come immagine di base. root@kitploit: FROM ubuntu Il...

CVE-2019-5700

CVE-2019-5700 Leider habe ich keinen schicken und klugen Namen für diese Schwachstelle. Dieser Bug ist recht einfach auszunutzen. Ich habe ihn tatsächlich eine ganze Weile zurückgehalten, bis mir klar wurde, dass dies mehr Geräte betreffen könnte als ursprünglich angenommen. Betroffen: Dieser Bug...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Vollständig bewaffneter Exploit für das NVIDIA Container Toolkit Referenzen https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 é uma vulnerabilidade que eu submeti à NVIDIA PSIRT. Pessoalmente, ela pode levar a altos riscos de segurança em clusters HPC multi-inquilino, especialmente em plataformas de machine learning em nuvem. Este repositório simplesmente demonstra a vulnerabilidade em...

sass-king

SASS King Reverse engineering di NVIDIA SASS da kernel controllati a audit di produzione. Articolo 1 · Articolo 2 · Base di conoscenza · Libreria di pattern · Glossario istruzioni SM120 · Note di codifica · Inizia qui · Struttura del progetto · Capitoli tensor core · Contribuire SASS King è un...

CVE-2026-65091

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65099

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

CVE-2026-65090

NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65089

NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

EUVD-2026-66107

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...

EUVD-2026-66106

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...