poc-cve-2024-0132

poc-cve-2024-0132 Reproduktionsumgebung: Betriebssystem: Ubuntu 22.04 mit Nvidia-Treiber docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduktionsschritt: Das PoC-Container-Image ausführen Ziel: Auf Host-Dateien im Container zugreifen Docker-Daemon-APIs über docker.sock im Container aufrufe...

CVE-2025-23266

CVE-2025-23266 Autor: Mark Mallia Plataforma-alvo: Ubuntu 22.04, FastAPI v2.4.3 → corrigido para v2.5.1 em 2025-10-02 1 – Em resumo: o que este ataque envolve A rotina parserequest do FastAPI copia os cabeçalhos de requisição HTTP para um pequeno buffer que reside na pilha do chamador. Se um...

CVE-2024-0132

CVE-2024-0132 PoC di CVE-2024-0132 Iniziamo scegliendo un'immagine di base. La disposizione delle librerie nel sistema dipende da quale sarà. Ad esempio, per alpine sarà /usr/lib64/, per ubuntu sarà /usr/lib/x8664-linux-gnu. Useremo ubuntu come immagine di base. root@kitploit: FROM ubuntu Il...

CVE-2019-5700

CVE-2019-5700 Leider habe ich keinen schicken und klugen Namen für diese Schwachstelle. Dieser Bug ist recht einfach auszunutzen. Ich habe ihn tatsächlich eine ganze Weile zurückgehalten, bis mir klar wurde, dass dies mehr Geräte betreffen könnte als ursprünglich angenommen. Betroffen: Dieser Bug...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Vollständig bewaffneter Exploit für das NVIDIA Container Toolkit Referenzen https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 é uma vulnerabilidade que eu submeti à NVIDIA PSIRT. Pessoalmente, ela pode levar a altos riscos de segurança em clusters HPC multi-inquilino, especialmente em plataformas de machine learning em nuvem. Este repositório simplesmente demonstra a vulnerabilidade em...

sass-king

SASS King Reverse engineering di NVIDIA SASS da kernel controllati a audit di produzione. Articolo 1 · Articolo 2 · Base di conoscenza · Libreria di pattern · Glossario istruzioni SM120 · Note di codifica · Inizia qui · Struttura del progetto · Capitoli tensor core · Contribuire SASS King è un...

EUVD-2026-66107

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains an unauthenticated access vulnerability in its inference server setup , allowing a remote attacker on an adjacent network to reach the inference service without credentials. A successful exploit can result in information disclosure and denial of service . The CV...

EUVD-2026-66106

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability that allows a local attacker with low privileges to invoke a process that exposes sensitive information , leading to information disclosure . The CVSS 3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confident...

CVE-2026-65087

NVIDIA NemoClaw contains a vulnerability due to insufficiently protected credentials . A successful exploit could lead to information disclosure and data tampering . The CVSS 3.1 base score is 5.6 (Medium) , with a local attack vector , low attack complexity, low privileges required, and user int...

EUVD-2026-66105

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65086

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler that allows an OS command injection. A successful exploit could lead to code execution , information disclosure , and data tampering . The CVSS v3.1 base score is 6.8 (MEDIUM) with a vector of AV:N/AC:H/PR:L/UI:N/S:U/...

EUVD-2026-66104

NVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an attacker could cause an OS command injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...

EUVD-2026-66103

NVIDIA OpenShell for Linux contains a vulnerability in its inference proxy, where an attacker could cause an improper encoding or escaping of output. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65085

NVIDIA OpenShell for Linux is affected by a vulnerability in its inference proxy component, caused by improper encoding or escaping of output . A successful exploit could lead to information disclosure and data tampering . The vulnerability has a CVSS 3.1 score of 5.2 (Medium) , with a local atta...

CVE-2026-65084

NVIDIA NemoClaw for Linux has an improper certificate validation flaw in its deployment process. An attacker can exploit this remotely (with high complexity, no privileges required) to achieve information disclosure, data tampering, code execution, and privilege escalation . The vulnerability is ...

EUVD-2026-66102

NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, code execution, and escalation of privileges...