CVE-2023-36407

CVE-2023-36407 이것은 CVE-2023-36407, Hyper-V 권한 상승 취약점Hyper-V Elevation of Privilege Vulnerability에 대한 PoC입니다. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 취약점 winhvr.sys!WinHvGet/SetVpState를 통한 Non-paged Pool의 OOB 읽기/쓰기 재현 단계 사용한 환경: Windows 11 22...

CVE-2024-31666

脆弱性の概要 Flusity-CMS v.2.33 には脆弱性が存在し、リモート攻撃者が細工されたスクリプトを通じて editaddonpost.php コンポーネントで任意のコードを実行できる可能性があります。 影響を受けるバージョン Flusity-CMS v.2.33 脆弱性の詳細 攻撃者は editaddonpost.php コンポーネントに細工されたスクリプトを送信することでこの脆弱性を悪用し、標的サーバー上で任意のコードを実行する可能性があります。 影響 この脆弱性により、攻撃者がサーバー上で任意のコードを実行し、サーバー全体を制御できる可能性があります。 発見者：胡詩雅...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: rcv: Prevent NULL pointer dereferencing in machinekexecprepare A NULL pointer dereferencing issue was identified in riscv’s machinekexecprepare. In this function, image-segmenti.buf might be NULL, and it may be copied without...

sfuzz

SFUZZ 시작 날짜: 2021년 12월 이 도구는 커스텀 Just-In-Time 컴파일러를 사용하여 네이티브에 가까운 성능을 달성하는 커버리지 기반coverage-guided, 에뮬레이션 기반 그레이박스 퍼저입니다. 실행 중에 RISC-V ELF 바이너리를 중간 표현IR으로 리프팅한 다음 JIT 컴파일하여 x86으로 변환하는 방식으로 동작합니다. JIT 컴파일 중에는 커버리지 추적, asan, cmpcov, 스냅샷 기반 퍼징과 같은 퍼징 개선 기능을 활성화하도록 코드가 계측됩니다. 기능 멀티스레드: 임의의 개수의 스레드를...

Kernel-exploitation

커널 익스플로잇 decompress.sh CPIO 아카이브에서 파일 추출 !/bin/sh mkdir fs cd fs cp ../initramfs.cpio.gz ./initramfs.cpio.gz gunzip ./initramfs.cpio.gz cpio -idm ../initramfs.cpio.gz &&\ cd .. &&\ gunzip -f initramfs.cpio.gz &&\ ./run.sh ext4 파일시스템 아카이브인 경우 mount ./initramfs.cpio.gz ./fs/ extract-image.sh 유용한 구조...

CVE-2024-30973

CVE-2024-30973 - V-SOL G/EPON ONU - HG323AC-B 설명 항목: 항목: G/EPON ONU 사양: HG323AC-B 장치 모델 XPON+2GE+1POTS+2WIFI+USB 장치 S/N 70B64F-1234570B64F0C2C0C 하드웨어 버전 V1.0 펌웨어 버전 V2.0.08-210715 PON S/N GPON000C2C0C 취약점 유형: 잘못된 접근 제어 취약점 설명: 취약점을 악용하려면 낮은 권한의 사용자로 인증되어야 하며, 이를 통해 관리자 기능방화벽 비활성화 및 SSH...

gerhart01

gerhart01 CVE-2020-0890 | Windows Hyper-V 서비스 거부 취약점 개념 증명 코드...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin (all versions up to and including 4.13.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when handling Facebook Comment Messages via v-html in...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

EUVD-2026-91253

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756: Improper Neutralization of Input During Web Page Generation

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

SUSE CVE-2026-97587

In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: store available counter mask as bitmap The available-counter mask was a single unsigned long, but iteration uses RISCVMAXCOUNTERS, which is 64. On RV32 that reads past the object. Filling with an unsigned-long bit a...

openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V

A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side...

openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V

A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side...

CVE-2026-54875

A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side...

ALPINE-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105516 CVE-2026-54875 affecting package kata-containers 4.1.0.kata0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105888 CVE-2026-54875 affecting package rust 1.96.1-2

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...