Lucene search
+L

986 matches found

Kitploit
Kitploit
•added 2026/09/25 12:29 p.m.•22 views

igvm

igvm Este proyecto es el hogar del formato de archivo Independent Guest Virtual Machine IGVM. La especificación del formato se puede encontrar en la caja igvmdefs, con una implementación en Rust del formato binario en la caja igvm. El formato de archivo IGVM está diseñado para encapsular toda la...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 6:17 a.m.•11 views

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Apply the patches in the host-patches folder to the Linux host and QEMU. 2. Start an SEV-SNP VM. 3. Run the code in this repo and wait for the message "waiting for the hypervisor to change memory to MMIO". 4. Spam the attack command in QEMU several times. 5. Once the exploit...

7CVSS6.7AI score0.00693EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/24 2:00 p.m.•14 views

cve-2023-31355-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause snpreclaimbuffer unconditionally...

6CVSS6.6AI score0.00443EPSS
SaveExploits1References7
Kitploit
Kitploit
•added 2026/09/24 1:59 p.m.•10 views

cve-2023-20573-poc

PoC Usage This repo contains a VMM that boots an SEV-SNP guest with a custom kernel. The VMM and kernel are a stripped-down version of a project of mine. A modified Linux kernel is required to run on the host: https://github.com/Freax13/linux/tree/for-amd. The Proof of Concept can be run like thi...

3.2CVSS5.5AI score0.00289EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 10:46 a.m.•12 views

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC for CVE-2025-29943 Prueba de concepto para la vulnerabilidad de hardware StackWarp CVE-2025-29943 en procesadores AMD. Esta falla permite a un atacante con privilegios de administrador en un host hipervisor manipular la configuración de la canalización de la CPU para corromper el...

4.6CVSS6.6AI score0.00229EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/22 1:59 p.m.•14 views

CVE-2026-53360-POC

CVE-2026-53360: Desbordamiento de montón en PSC de KVM SEV-SNP Prueba de concepto de una lectura y escritura fuera de los límites del montón en el manejo del Cambio de Estado de Página PSC de SEV-SNP de KVM. Un invitado SEV-SNP malicioso hace que el kernel anfitrión recorra un array de entradas P...

8.8CVSS7AI score0.00173EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/19 12:53 p.m.•9 views

cve-2023-31346-poc

Firmware Memory Leak The code here aims to demonstrate the memory leaks in guest messages headers and the CPUID request guest message. Prerequisites Install rustup. Install a Linux kernel with SEV-SNP host support. I used a kernel with my a few of own patches...

6CVSS5.8AI score0.00309EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/19 5:12 a.m.•12 views

cve-2024-21978-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of a running SEV-SNP guest. Tested on version 1.55.16 latest as of the time of writing. Root Cause The nvpaddr field of the SEVINITEX command can be use...

7.9CVSS6.8AI score0.00493EPSS
SaveExploits1References7
Kitploit
Kitploit
•added 2026/09/19 4:55 a.m.•13 views

cve-2024-21980-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause The SEV firmware has a table call...

7.9CVSS7.2AI score0.00447EPSS
SaveExploits1References3
NVD
NVD
•added 2026/09/18 6:18 p.m.•9 views

CVE-2026-92702

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...

9.1CVSS0.00308EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/18 5:02 p.m.•16 views

CVE-2026-92702

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2 , the intra-handshake attested TLS (aTLS) AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is ni...

9.1CVSS5.6AI score0.00308EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/18 5:02 p.m.•11 views

EUVD-2026-83192

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...

9.1CVSS5.6AI score0.00308EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/18 5:02 p.m.•40 views

CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...

9.1CVSS0.00308EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/18 5:02 p.m.•9 views

CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...

9.1CVSS5.6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•3 views

CVE-2026-92702: Origin Validation Error

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...

9.1CVSS5.6AI score0.00308EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/16 11:17 a.m.•11 views

DEBIAN-CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

5.8AI score0.00219EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:17 a.m.•10 views

CVE-2026-90040

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

0.00219EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/16 10:33 a.m.•23 views

CVE-2026-90040

CVE-2026-90040 affects the Linux kernel KVM SEV-SNP (AMD Secure Nested Paging) subsystem. When the backing guest_memfd page for the guest-provided VMSA (Virtual Machine State Area) is invalidated (e.g., via PUNCH_HOLE or memslot deletion/move), KVM fails to invalidate the vCPU's cached control.vm...

5.8AI score0.00219EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 10:33 a.m.•9 views

EUVD-2026-80648

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

5.8AI score0.00219EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/16 10:33 a.m.•35 views

CVE-2026-90040 KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Wire up a gmeminvalidaterange call for SNP VMs, and use it to force vCPUs to reload/recheck their guest-provided VMSA if the backing gmem page is being...

0.00219EPSS
SaveExploits0References2
Rows per page
Query Builder