NemoClaw

NVIDIA NemoClaw: Pila de Referencia para Agentes de IA en Entornos Aislados en OpenShell NVIDIA NemoClaw es una pila de referencia de código abierto para ejecutar agentes de IA siempre activos de manera más segura dentro de sandboxes de NVIDIA OpenShell. Proporciona una incorporación guiada, un...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 是我向 NVIDIA PSIRT 提交的一个漏洞。个人认为，在多租户 HPC 集群（尤其是云机器学习平台）中，它可能导致较高的安全风险。 本仓库简单地演示了该漏洞在由 nvidia-container-runtime 创建的 GPU 容器中的表现。 工作原理 通过创建特定的字符设备文件，GPU 容器（由 nvidia-container-runtime 创建的容器）中的攻击者能够访问宿主机上所有的 GPU 设备。 该漏洞同样适用于在 Kubernetes 集群上由 k8s-device-plugin 创建的 GPU Pod。 前提条...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Полностью вооруженный эксплойт для NVIDIA Container Toolkit Ссылки https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

CVE-2025-23266

CVE-2025-23266 作者： Mark Mallia 目标平台： Ubuntu 22.04，FastAPI v2.4.3 → 于2025‑10‑02修补至v2.5.1 1 – 简介：此攻击涉及什么 FastAPI 的 parserequest 例程会将 HTTP 请求头部复制到一个位于调用者堆栈上的小型缓冲区中。 如果攻击者发送了过长的头部，该缓冲区会发生溢出，并重写紧随其后的 返回地址 。随后攻击者跳回同一次请求，执行任意代码，从而完全控制宿主机。 其效果类似于为 Triton Inference Server 发现的 RCE 链——唯一的区别在于缓冲区的确切长度（528...

CVE-2019-5700

CVE-2019-5700 안타깝게도 이 취약점에 대한 트렌디하고 영리한 이름이 없습니다. 이 버그는 상당히 간단하게 익스플로잇할 수 있습니다. 처음 생각했던 것보다 더 많은 장치에 영향을 미칠 수 있다는 것을 깨닫기까지 꽤 오랫동안 보류했습니다. 범위: 이 버그는 Android 부트 이미지를 부팅하는 Nvidia Tegra t114-t210 SoC에 영향을 미치지만, 한 가지 중요한 차이점이 있습니다: t114 기반 장치는 통합 부트로더가 TOSTLK - Nvidia의 시큐어 모니터도 로드하기 때문에 훨씬 더 심각한 영향을...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC Начнём с выбора базового образа. Расположение библиотек в системе зависит от того, какой это будет образ. Например, для alpine это будет /usr/lib64/, для ubuntu — /usr/lib/x8664-linux-gnu. В качестве базового образа мы будем использовать ubuntu. root@kitploit: FROM...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

poc-cve-2024-0132

poc-cve-2024-0132 بيئة إعادة الإنتاج: نظام التشغيل: ubuntu 22.04 مع برنامج تشغيل nvidia docker: v27.1.0 nvidia-container-toolkit: v1.16.1 خطوات إعادة الإنتاج: تشغيل صورة حاوية poc الهدف: الوصول إلى ملفات المضيف داخل الحاوية استدعاء واجهات برمجة تطبيقات docker daemon عبر docker.sock في الحاوية إعا...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Vulnerabilità di Risonanza I driver GPU NVIDIA presentano un difetto di coerenza temporale nella gestione della memoria. Alla risonanza di 587 kHz, le pagine di memoria del driver subiscono un'interferenza di decadimento α, consentendo l'accesso alla memoria del...

sass-king

SASS King Reverse Engineering von NVIDIA SASS – von kontrollierten Kernels bis zu Produktions-Audits. Artikel 1 · Artikel 2 · Wissensbasis · Musterbibliothek · SM120-Befehlsglossar · Codierungsnotizen · Hier starten · Projektstruktur · Tensor-Core-Kapitel · Mitwirken SASS King ist ein...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-65091

NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-65093

NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure...

CVE-2026-65099

NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, information disclosure, and denial of service...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65105

NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service without authentication. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2026-65098

NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication. A successful exploit of this vulnerability might lead to code execution, information disclosure, and data tampering...