PlEXcalaison

Lokale Privilegien PlEXcalasion - CVE-2021-42835 Plex Media Server für Windows vor Version 1.25.0.5282 ist anfällig für Time-Of-Check-Time-Of-Use TOCTOU, was es Benutzern mit niedrigen Privilegien ermöglicht, SYSTEM-Privilegien zu erlangen. Entdeckt von Tomer Peled, Netanel Cohen und Amir Shen,...

sgxray

SGXRay: Automatizzare il rilevamento delle vulnerabilità per le app SGX Intel SGX protegge la logica applicativa isolata e i dati sensibili all'interno di un enclave con crittografia della memoria basata su hardware. Per utilizzare questo meccanismo di sicurezza hardware è necessario un modello d...

CVE-2026-41651

Pack2TheRoot — CVE-2026-41651 Corrida TOCTOU no manipulador de transações do PackageKit. Qualquer usuário local sem privilégios pode instalar pacotes arbitrários como root, sem autenticação. Visão Geral Campo| Valor ---|--- CVE| CVE-2026-41651 Componente| Daemon do PackageKit packagekitd Versões...

schrodingers-toctou

cat-states Minimal proofs-of-concept for compiler-invented loads — situations where a single C-level read of memory compiles to two or more architectural reads of the same address. We call these cat-states – if the pattern is used across a check/use boundary, the compiler may emit a time-of-check...

PPLFault

PPLFault Von Gabriel Landau bei Elastic Security. Aus PPLdump ist tot. Es lebe PPLdump! vorgestellt auf Black Hat Asia 2023. PPLFault 2024-02-AKTUALISIERUNG: Microsoft hat PPLFault am 2024-02-13 gepatcht. Siehediesen Thread für die zugehörige Diskussion. Nutzt eine TOCTOU in der...

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU na Verificação de Permissão de Arquivo Antes de Abrir Código do Programa Python root@kitploit: toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read'...

symboliclink-testing-tools

symboliclink-testing-tools c Google Inc. 2015 Sviluppato da James Forshaw Questa è una piccola suite di strumenti per testare vari tipi di collegamenti simbolici di Windows. È composta dai seguenti strumenti: BaitAndSwitch : Crea un collegamento simbolico e usa un OPLOCK per vincere una TOCTOU...

CVE-2024-50379-POC

CVE-2024-50379 Ausnutzung und POC Dieses Repository enthält einen Proof of Concept POC für CVE-2024-50379 , eine Schwachstelle, die Apache Tomcat betrifft. Das Problem beinhaltet eine Time-of-Check Time-of-Use TOCTOU Race Condition , die zu Remote Code Execution RCE führen kann, insbesondere auf...

CVE-2026-52885

TOCTOU: HMAC prüft Festplatte, führt aus dem Speicher aus Notepad++ v8.9.6.2 — Angreifergesteuerte UserCommand-Ausführung durch HMAC-Race-Condition Advisory...

CVE-2026-41651-Python

Pack2TheRoot: CVE-2026-41651 Python PoC Python dell'exploit di escalation dei privilegi locali TOCTOU di PackageKit. Qualsiasi utente locale non privilegiato può installare pacchetti arbitrari come root senza alcuna autenticazione. Campo| Valore ---|--- CVE| CVE-2026-41651 Componente| PackageKit...

rbndr

rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...

CVE-2024-50379

Apache Tomcat CVE-2024-50379 TOCTOU Esecuzione Remota di Codice...

FreeBSD -- TOCTOU race in POSIX shared memory large page configuration

Problem Description: The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been...

CVE-2026-7791

CVE-2026-7791 PoC: Privilegiato per impostazione predefinita Proof-of-concept di ricerca per escalation dei privilegi locale in Amazon WorkSpaces TOCTOU + scrittura arbitraria di file a livello SYSTEM in Skylight Workspace Config Service. Dettagli tecnici completi: Cymulate blog | ---|--- CVE|...

CVE-2024-30088__Windows-TOCTOU-exploit

CVE-2024-30088 – PoC adattato per WinRM 📌 Riepilogo Questa è una versione modificata dell'exploit originale CVE-2024-30088, adattata per funzionare in ambienti non interattivi WinRM. Il PoC originale avvia una cmd.exe interattiva, che non funziona tramite WinRM. Questa versione si concentra...

CVE-2026-9728

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-9728 TOCTOU race in mbox_send syscall verifier allows userspace to leak kernel memory

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

CVE-2026-9728

CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg->data/msg->size by reading them directly from live userspace memory, then forwards the o...

CVE-2026-74692

A flaw was found in the Linux kernel's net/smc component. A time-of-check to time-of-use TOCTOU race condition allows a remote attacker to exploit a window where the listener's state is checked without proper locking. By opening TCP connections while the server is closing, an attacker can cause a...

CVE-2021-3560-exploit

CVE-2021-3560 — Escalation dei privilegi in Polkit CVE-2021-3560 è una vulnerabilità di escalation dei privilegi locale in Polkit ex PolicyKit, il framework di autorizzazione utilizzato dagli ambienti desktop Linux. Un attaccante locale e non privilegiato può sfruttare una race condition...