cve-2024-0519-rca-research

CVE-2024-0519 — RCA Research Artefactos de análisis de causa raíz para CVE-2024-0519 acceso a memoria fuera de los límites en V8, Chrome 120, explotado activamente. Corrección : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 Versión de V8 estudiada : 12.0.267.16 fbc4963bbff,...

CVE-2025-14174-Poc

CVE-2025-14174 - Exploit PoC Resumen Este repositorio contiene un exploit de Prueba de Concepto PoC completamente funcional para CVE-2025-14174 también registrado como EUVD-2025-203113, una vulnerabilidad crítica de corrupción de memoria en el motor gráfico ANGLE. El fallo surge de una restricció...

CVE-2025-40019-POC

prueba de concepto para CVE-2025-40019 CVE-2025-40019 es el mecanismo de Vector de Inicialización Sal-Sector Cifrado crypto/essiv.c que tiene una validación insuficiente de la longitud de los Datos de Autenticación Asociados AAD en relación con el tamaño del Vector de Inicialización IV, lo que...

CVE-2021-1732

CVE-2021-1732 La vulnerabilidad ocurre en el controlador gráfico de Windows win32kfull!NtUserCreateWindowEx, donde una llamada de retorno del kernel al modo usuario para asignar memoria y la configuración del atributo tagWND-flag están desincronizadas, lo que permite falsificar el valor de...

CVE-2022-1015-1016

CVE-2022-1015 & CVE-2022-1026 Este README.md es una traducción del blog de David. David encontró los CVE's 1015 y 1016 en el kernel de Linux. Puedes visitar su página web para leer el documento original. Aquí te dejo sus redes sociales: Twitter Github Un análisis de las dos nuevas vulnerabilidade...

CVE-2022-1015

CVE-2022-1015 objetivo: kernel de Linux 5.17.0 config: .config requisitos: root@kitploit: apt install libmnl-dev libnftnl-dev compilar: root@kitploit: gcc exploit.c -o exploit -lmnl -lnftnl -lpthread -no-pie Referencias...

CVE-2025-51495

Me gustaría informar sobre una vulnerabilidad de seguridad identificada en la última versión de Mongoose v7.17. El problema reside en el módulo WebSocket, específicamente dentro de la función mgwscb encargada de manejar los frames WebSocket entrantes. La función es vulnerable a un desbordamiento ...

Linux Distros Unpatched Vulnerability : CVE-2026-89442

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user- supplied socketid with 'socketid topologymaxpackages', but...

Linux Distros Unpatched Vulnerability : CVE-2026-89612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: reject invalid MFT LCNs from boot sector The NTFS boot sector stores the MFT and MFTMirr locations as unsigned 64-bit LCNs, but parsentfsbootsector decode...

Linux Distros Unpatched Vulnerability : CVE-2026-81017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor number in-sensornum. crosecsensorhubringhandler...

Linux Distros Unpatched Vulnerability : CVE-2026-89610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run...

Linux Distros Unpatched Vulnerability : CVE-2026-89617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: validate dirty page table on log replay Each DIRPAGEENTRY ends in a pagelcns array whose length is the on-disk lcnsfollow field. checkrstbl validates...

CVE-2026-89556

A flaw was found in the Linux kernel. This vulnerability arises from insufficient validation of string table section types within ELF Executable and Linkable Format files. A local attacker could exploit this by providing a specially crafted ELF module, leading to the kernel attempting to access...

CVE-2026-80972

A flaw was found in the ALSA Advanced Linux Sound Architecture aloop driver within the Linux kernel. This vulnerability arises from insufficient validation of the card index during device setup, specifically when a device is manually configured using the sysfs interface. A local attacker could...

CVE-2026-89579

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component, specifically impacting 32-bit systems. This vulnerability stems from incorrect sizing and indexing of bloom filters, which can lead to out-of-bounds memory access. A local attacker with CAPBPF capabilities could exploit...

CVE-2026-89728

A flaw was found in the Linux kernel's I3C Renesas driver. When the I3C bus is empty and software initiates Dynamic Address Assignment DAA, an out-of-bounds access can occur. This is due to an incorrect calculation of the newly discovered devices bitmask, which can lead to system instability or...

CVE-2026-80969

A flaw was found in the Linux kernel's ALSA mpu401 driver. The driver fails to validate the card index when a device is manually bound through the sysfs interface. This oversight can lead to an out-of-bounds memory access. A local attacker with appropriate permissions could exploit this...

CVE-2026-89718

A flaw was found in the zram component of the Linux kernel. This vulnerability occurs because the writebackstore function calculates table scan bounds before acquiring a necessary lock. If the zram device is reinitialized with a smaller disk size during this window, the function may attempt to...

CVE-2026-89442

A flaw was found in the Linux kernel. The isstifclosassoc ioctl function in the platform/x86: ISST module contains an improper validation of the socketid. This allows a local attacker to cause an out-of-bounds access or a NULL pointer dereference. This could lead to a system crash, resulting in a...

d-os-descriptor

d-os-descriptor Resumen El subsistema USB Gadget incluye problemas de seguridad en la sección de manejo de descriptores de sistema operativo OS de la función compositesetup composite.c. El procesamiento de mensajes de solicitud de transferencia de control debidamente elaborados provoca un bloqueo...