Lucene search
+L

172 matches found

Kitploit
Kitploit
added 2026/09/11 4:59 p.m.9 views

AFD

AFD CVE-2022-24494 이 취약점은 임의 메모리 읽기arbitrary memory read입니다. 근본 원인은 사용자 영역user-land에서 제공된 메모리 주소에 대한 검증이 없다는 점이며, 이 주소는 memcpy 작업에서 해당 메모리 주소의 데이터를 풀 메모리pool memory로 복사하는 데 사용됩니다. 검사가 누락된 위치는 Afd!AfdTliIoControl+0x40B 입니다. 위 스크린샷에서 볼 수 있듯이, 사용자 영역 메모리 주소는 InputBuffer+0x20에서 처음 복사될 때...

7.8CVSS7.5AI score0.01905EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 12:10 a.m.6 views

CVE-2021-28476

CVE-2021-28476: уязвимость удаленного выполнения кода от гостя к хосту «Microsoft Hyper-V Remote Code Execution Vulnerability» в vmswitch.sys. Это доказательство концепции для CVE-2021-28476 «Уязвимость удаленного выполнения кода Hyper-V», произвольное чтение памяти в vmswitch.sys провайдер сетев...

9.9CVSS8.2AI score0.38625EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 1:46 p.m.7 views

CVE-2024-2887

CVE-2024-2887 Это краткое описание CVE-2024-2887, которое я использовал для получения V8CTF M123. При определении большего количества типов, чем kV8MaxWasmTypes, что может быть достигнуто путем добавления большего количества типов в RecGroup, индекс типов может превышать 20 бит и затем...

8.1CVSS7.3AI score0.17922EPSS
SaveExploits5
OSV
OSV
added 2026/08/20 5:26 p.m.16 views

GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...

5.5CVSS6.4AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/15 1:52 a.m.11 views

CVE-2025-29937

An out of bounds read within the AMD Platform Management Framework PMF could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality...

5.8CVSS5.9AI score0.00104EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/04/09 12:35 p.m.22 views

ruby: Arbitrary memory address read vulnerability with Regex search

A flaw was found in Ruby. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings...

6.6CVSS6.7AI score0.00629EPSS
SaveExploits0References5
OSV
OSV
added 2026/03/27 6:16 a.m.10 views

AZL-81104 CVE-2026-34353 affecting package ocaml for versions less than 5.1.1-1

In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...

5.9CVSS5.9AI score0.00114EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/04 7:44 p.m.15 views

CVE-2026-3437

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...

9.3CVSS6AI score0.00159EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/11/27 4:10 p.m.12 views

CVE-2025-33192

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...

5.7CVSS6.8AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/25 6:15 p.m.13 views

CVE-2025-33192

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...

5.7CVSS0.00143EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 5:58 p.m.8 views

CVE-2025-33192

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...

5.7CVSS6.5AI score0.00143EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/25 5:58 p.m.32 views

CVE-2025-33192

CVE-2025-33192 affects NVIDIA DGX Spark GB10 via a vulnerability in the SROOT firmware that could allow an attacker with local access to perform an arbitrary memory read, potentially causing a denial of service. The impact is described as local, with availability as the primary concern; no exploi...

5.7CVSS6.5AI score0.00143EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:00 a.m.16 views

NVIDIA DGX Spark 安全漏洞

The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from an arbitrary memory read in the SROOT firmware that could lead to a denial of service...

5.7CVSS6.6AI score0.00143EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/25 12:00 a.m.13 views

PT-2025-48053

NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...

5.7CVSS6.8AI score0.00143EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/15 5:41 a.m.27 views

CVE-2025-55080

The vulnerability CVE-2025-55080 affects Eclipse ThreadX prior to version 6.4.3. Root cause: memory protection enabled, syscall parameter verification is insufficient, enabling an attacker to obtain an arbitrary memory read/write. Affected component: ThreadX RTOS (pre-6.4.3). Impact: arbitrary me...

7.2CVSS6.6AI score0.00129EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/15 12:00 a.m.15 views

PT-2025-42235

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...

7.2CVSS7AI score0.00129EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-11960

Malware in sbrugna...

5.5CVSS5.6AI score0.0017EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2017-12036

Malware in sbrugna...

8.2CVSS8.1AI score0.01311EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2017-12033

Malware in sbrugna...

9.8CVSS9.3AI score0.02996EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2005-2493

Malware in sbrugna...

3.6CVSS6.1AI score0.00454EPSS
SaveExploits0References18
Rows per page
Query Builder