CVE-2026-90648

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc in wasmrtallocatefuncreftable wasm2c/wasm-rt-impl-tableops.inc. When the funcref table allocation...

CVE-2026-90485

A null pointer dereference in the function sub_11838 of the IURegistryFilter.sys driver (IOCTL Dispatch Handler) affects IOBit Uninstaller 15.5.0.11 . A local attacker with low privileges can trigger the flaw without user interaction, resulting in a high-impact denial of service (CVSS 3.1: 5.5 Me...

cve-2026-86547-mrubyc-op-enter

CVE-2026-86547 — Desreferencia de puntero NULL en OPENTER de mrubyc Prueba de concepto independiente para CVE-2026-86547 , una desreferencia de puntero NULL en el manejador openter de mrubyc hasta la versión 4.0.0. Resumen mrubyc es una implementación ligera de Ruby para sistemas embebidos. Su...

CVE-2015-8543_for_SLE12SP1

$cat /etc/-release root@kitploit: PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" $id root@kitploit: uid=1000jeremysp1 gid=100users groups=100users $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i sh-4.2...

exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS エクスプロイト Ntpd は null ポインタ参照の問題を抱えており、これをトリガーしてアプリケーションをクラッシュさせることが可能です。NTP.org によると、「ntpd が mrulist クエリ要求を許可するように設定されており、そのサーバーが細工された悪意のあるパケットを送信した場合、その細工された悪意のある mrulist クエリパケットを受信すると ntpd はクラッシュします。」 ntpd...

CVE-2009-2692

CVE-2009-2692 Linux ヌルポインタ参照 これは、https://www.exploit-db.com/exploits/9545/ で入手可能なコードのコンパイル済みバイナリです 教育目的でコンパイルされました CentOS 4.8 でコンパイルされました...

CVE-2025-55780

CVE-2025-55780 MuPDF 1.26.4 EPUBレンダリング関数におけるヌルポインタ間接参照 CVE参照 - CVE-2025-55780 影響を受けるバージョン : 1.26.7 およびそれ以前 発見およびテスト環境 : 1.26.4 深刻度 CVSSv3 スコア : 7.5 High 修正コミット : https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=bdd5d241748807378a78a622388e0312332513c5 Bugzilla :...

CVE-2024-26475

CVE-2024-26475 著者 Sherlock Fang, Vlad Tronciu, Ayam Babu 説明 radareorg radare2 の v.0.9.7 から v.5.8.6 までの問題は v.5.8.8 で修正されており、ローカルの攻撃者が grubsfsreadextent 関数を介してサービス拒否を引き起こす可能性があります。 攻撃ベクトル “treeblock = grubmallocdata-blocksize;” がメモリ上の NULL を指すようにペイロードを作成し、“treeblock” の値が “tree = struct grubsfsbtree...

CVE-2024-36424

CVE-2024-36424 Esta vulnerabilidad fue descubierta y divulgada por M. Akil Gündoğan del Secunnix Vulnerability Research Team. Este repositorio contendrá la prueba de concepto y los avisos. Detalles: Producto: K7 Ultimate Security Versiones afectadas: v17.0.2019 CVE ID: CVE-2024-36424 Sistema...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

CVE-2023-3338-DECPwn

DECPwn 使用我的DECnet漏洞和空页映射启用，练习不同的Linux内核利用技术。 场景 全部禁用 ：qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" 代码执行被重定向到用户态的output函数，该函数调用commitcredspreparekernelcred0。 系统调用挂钩 将 syscalltable 中的 mkdir 系统调用处理程序地址替换为一个类似于场景1的函数。 启用SMEP和KPTI ：qemu-system-x8664 -append "nosmap nokaslr"...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref は CVE-2017-2388 の概念実証エクスプロイトです。これは IOFireWireUserClient における NULL ポインタ参照で、macOS Sierra 10.12.4 で修正されました。この脆弱性をトリガーすると、FireWire ポートを備えたデバイスでサービス拒否が発生する可能性があります。 CVE-2017-2388 関数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop は、パラメータ...

CVE-2026-89711

A flaw was found in the Linux kernel's Network File System Daemon NFSD. An invalid assumption in the nfsdmodecheck function regarding directory lookup capabilities during NFS reexport could lead to a null pointer dereference. A remote attacker could exploit this by performing a LOOKUP operation o...

CVE-2026-89770

A flaw was found in the iomap component of the Linux kernel. This vulnerability occurs when Protection Information PI verification is disabled on a block device, causing fsbiointegrityalloc to not allocate a bio integrity payload. Subsequently, the iomapbioreadfoliorangesync function attempts to...

CVE-2026-89734

A flaw was found in the Linux kernel's USB Video Class UVC gadget driver. This vulnerability occurs in the uvcgvideoinit function when the kthreadrunworker function fails. In such a scenario, an error logging mechanism attempts to access an uninitialized pointer, leading to a null pointer...

CVE-2026-89451

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit SVA Shared Virtual Addressing component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not properly initialized. A local attacker could exploit this flaw by...

CVE-2026-89561

A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL implementation. A remote attacker could send specially crafted IPv6 packets to a vulnerable system while manipulating the network interface's Maximum Transmission Unit MTU, which defines the largest...

CVE-2026-80984

A flaw was found in the net/smc component of the Linux kernel. When a link group terminates while a socket is waiting in smcclosestreamwait, a NULL pointer dereference can occur during the SMC-D teardown path. This can lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-89696

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd. A remote client can exploit this by sending a specially crafted NFS COMPOUND request. This request, when processed, can lead to a NULL pointer dereference in the nfsd kthread, causing the system to crash and resulting in ...

CVE-2026-80963

A flaw was found in the Linux kernel's dm-stats module. This vulnerability occurs when the allocation of per-CPU data fails, which can lead to a null pointer dereference during the subsequent cleanup operation. This issue can cause the system to crash, resulting in a Denial of Service DoS...