CVE-2026-68967 Out-of-bounds Write in Bendix EC80 Brake ECU

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

CVE-2026-68967

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write , allowing an attacker on an adjacent network to deliver a payload that establishes an arbitrary write primitive , potentially crashing the ECU . The attack requires no privileges and no user interaction , with low complexity. CVSS 3.1...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descrizione Questa dimostrazione si è svolta a HITCON 2023 a Taiwan. La demo evidenzia lo sfruttamento di AMDCpuProfiler.sys all'interno di AMD μProf. Attivando una scrittura arbitraria sul token EPROCESS, si ottiene l'escalation dei privilegi a livello SYSTEM. La...

CVE-2026-40003

CVE-2026-40003, também conhecido como Joselito, é uma vulnerabilidade de escrita arbitrária de memória encontrada no BootROM do SoC ZXIC/Sanechips ZX297520V3. !CAUTION Este PoC foi publicado apenas para fins de pesquisa. Você NÃO deve usar este exploit para fins maliciosos. NÃO use o exploit em...

CVE-2026-31431-CopyFail-Universal-LPE

CVE-2026-31431 „Copy Fail“ — Universeller LPE-Exploit Linux-Kernel-Page-Cache 4-Byte-Arbitrary-Write → Lokale Privilegieneskalation Mehrere Exploit-Ansätze: dynamische ELF-Einstiegspunkt-Überschreibung, vollständiger Binärersatz, Python 3.x-kompatibel mit ctypes-splice-Fallback. Was ist das?...

CVE-2022-0847

CVE-2022-0847 exploit di CVE-2022-0847 che rimuove direttamente la password dell'account root Uso: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Requisiti: gcc Riepilogo del funzionamento: Il tradizionale exploit POC classico di Max Kellermann veniva usato per aggiungere un utente con privilegi ...

CVE-2026-31431-Linux-Copy-Fail

CVE-2026-31431 - Exploit Copy-Fail Linux Rust Un'implementazione in Rust di un exploit di escalation dei privilegi locali per CVE-2026-31431 Copy-Fail. Consente di eseguire shellcode personalizzati come Meterpreter Introduzione Xint ha divulgato CVE-2026-31431, una vulnerabilità di scrittura...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 Una riproduzione proof-of-concept della vulnerabilità del kernel Linux CVE-2026-31431 , nota anche come Copy Fail. Crediti a: Copy Fail Sistemi Interessati Versioni del kernel Linux 4.14 e successive La maggior parte delle distribuzioni principali rilasciate dal 2017 fino...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post-Exploitation-Technik, um beliebige Kernel-Schreibvorgänge / Inkremente in eine vollständige Lese-/Schreib-Primitive auf Windows 11 22H2+ umzuwandeln. Dieser PoC verwendet den HackSysExtremeVulnerableDriver. Der PoC unterstützt sowohl beliebiges Schreiben als auch...

PT-2026-82776

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU...

Dell Client BIOS Arbitrary Write (DSA-2026-280)

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write. Note that Nessus has not tested for this issue but has instead relied only...

Recreate-cve-2023-21768

产生原因：对比202209和202307的AFD.sys,在函数AfdNotifyRemoveIOCompletion中，202209版的windows和202307版的windows都有一步用ProbeForWrite函数检测一段内存区域是否在用户态，但是检测的buffer地址有0x8字节的不同，而在该漏洞patch之前，没有该检查，可以猜测202209版的buffer的检查地址可能不太正确而可能无效，而该检查的buffer与中间一步赋值有关：DWORD a3 + 24 = v20;其中应该检查的buffer是a3+24,而v20的值与v8 =...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

test_iconv

Testen von CVE-2024-2961 V1 – in Analyse Dieses Repository enthält ein C-Programm zum Testen von CVE-2024-2961, bei dem es sich um eine Pufferüberlauf-Schwachstelle in der Funktion iconv der GNU C Library glibc handelt. Aufgrund der Struktur des PHP-Heaps kann dieser Überlauf ausgenutzt werden, u...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

EUVD-2026-65091

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privileged local attacker with user interaction could potentially exploit this to achieve Arbitrary Write . The CVSS v3.1 score is 6.6 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C...

Astra Linux – Vulnerability in Linux

In the Linux kernel before version 5.11.14, there is a use-after-free issue in the cipsov4genopt module, located in net/ipv4/cipsoipv4.c. This issue arises due to improper handling of the CIPSO and CALIPSO reference counts related to DOI definitions. As a result, an arbitrary value is written to...

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

NPM: Tina: Broken Access Control: arbitrary bucket-key write/delete in next-tinacms-s3 and sibling production media adapters vulnerability discovered by ? in WordPress Npm next-tinacms-s3 versions 23.0.4...