CVE-2018-8897

CVE-2018-8897 POP SS 취약점CVE-2018-8897의 데모 익스플로잇으로, 커널 권한으로 서명되지 않은 코드 실행으로 이어집니다. KVA Shadowing을 비활성화하고 해당 보안 업데이트를 제거해야 합니다. 이는 특정 하이퍼바이저예: VMWare에서는 INT3 후 보류 중인 DB를 폐기하므로 작동하지 않을 수 있습니다. 상세 설명: https://blog.can.ac/2018/05/11/arbitrary-code-execution-at-ring-0-using-cve-2018-8897/ 결과:...

acceleratortroll

AcceleratorTroll™ CVE-2023-28206을 악용하여 유용한 것을 만듭니다. 로드맵 현재, 우리는 이 취약점이 어떻게 작동하는지, 그리고 패닉 외에 다른 용도로 어떻게 악용할 수 있는지 여전히 이해하려고 노력 중입니다. 취약점을 사용하여 커널 권한을 획득할 수 있음을 증명합니다. krw 익스플로잇을 획득합니다. SSH 서버를 실행합니다. 서명되지 않은 코드 또는 위조 서명된 코드를 실행할 수 있도록 허용합니다. UICache를 제어하여 앱을 설치합니다. 크레딧 기여자: 앱 제작: Jan 로고 제작: iframe...

CVE-2025-65741

CVE-2025-65741 - Dylib Injection에 취약한 macOS용 Sublime Text 3 Download: https://www.sublimetext.com/3 CVE: CVE-2025-65741 | https://nvd.nist.gov/vuln/detail/CVE-2025-65741 Author: Vinicius Batistella Version Affected: Sublime Text 3 Build 3208 or prior for macOS Details Sublime Text 앱은 서명되지 않은 코드 주...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06, where it incorrectly enabled the use of the ACPI command when Secure Boot was enabled. This flaw allows an attacker with privileged access to create a Secondary System Description Table SSDT containing code that can overwrite the Linux...

Rocky Linux 8 [CIQ] Security Update: grub2-common / grub2-debuginfo / grub2-debugsource / grub2-efi-aa64 / etc Multiple Vulnerabilities (crlsa-2024_3184)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243184 advisory. grub2: grub2-set-bootflag can be abused by local pseudo-users CVE-2024-1048 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution...

CVE-2026-76802

A flaw was found in Nuclei, a vulnerability scanner. The Dynamic Application Security Testing DAST template loading process fails to enforce signature checks for code templates. This allows an attacker to craft a malicious template containing unsigned code, which, when processed by an operator...

CVE-2026-76802

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

CVE-2026-76802: Improper Neutralization of Special Elements used in an OS Command

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

Reyrolle 7SR5 (all versions

EUVD-2026-72668

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

PT-2026-87012

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

PT-2026-81934

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service...

CVE-2026-50719

The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

CVE-2025-59326: Protection Mechanism Failure

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

PT-2026-71074

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to enforce Integrity Measurement Architecture IMA policy protections across temporary file systems. IMA is a kernel-based mechanism that maintains a...