171 matches found
AFD
AFD CVE-2022-24494 이 취약점은 임의 메모리 읽기arbitrary memory read입니다. 근본 원인은 사용자 영역user-land에서 제공된 메모리 주소에 대한 검증이 없다는 점이며, 이 주소는 memcpy 작업에서 해당 메모리 주소의 데이터를 풀 메모리pool memory로 복사하는 데 사용됩니다. 검사가 누락된 위치는 Afd!AfdTliIoControl+0x40B 입니다. 위 스크린샷에서 볼 수 있듯이, 사용자 영역 메모리 주소는 InputBuffer+0x20에서 처음 복사될 때...
CVE-2024-2887
CVE-2024-2887 这是关于 CVE-2024-2887 的简短撰写说明，我利用此漏洞获得了 V8CTF M123 的奖励。 当定义的类型数超过 kV8MaxWasmTypes（可通过在 RecGroup 中填充更多类型来实现）时，类型索引可能超过 20 位并发生溢出。这样，两个具有相同 heaptype 的类型可能被视为相同。 我们可以通过创建一个包含 ref 对象的数组并使用 float64 数组读取来获得 addrof 原语，以及通过创建 float64 数组并将其作为对象读取来获得 fakeobj 原语。 wasm 模块的构建器如下所示： root@kitploit:...
CVE-2021-28476
CVE-2021-28476: Eine "Microsoft Hyper-V Remote Code Execution Vulnerability" von Gast zu Host in vmswitch.sys. Dies ist ein Proof of Concept für CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", einen beliebigen Speicherlesevorgang in vmswitch.sys...
GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework PMF could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality...
ruby: Arbitrary memory address read vulnerability with Regex search
A flaw was found in Ruby. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings...
CVE-2026-3437
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
CVE-2025-33192 affects NVIDIA DGX Spark GB10 via a vulnerability in the SROOT firmware that could allow an attacker with local access to perform an arbitrary memory read, potentially causing a denial of service. The impact is described as local, with availability as the primary concern; no exploi...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
NVIDIA DGX Spark 安全漏洞
The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from an arbitrary memory read in the SROOT firmware that could lead to a denial of service...
PT-2025-48053
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-55080
The vulnerability CVE-2025-55080 affects Eclipse ThreadX prior to version 6.4.3. Root cause: memory protection enabled, syscall parameter verification is insufficient, enabling an attacker to obtain an arbitrary memory read/write. Affected component: ThreadX RTOS (pre-6.4.3). Impact: arbitrary me...
PT-2025-42235
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...
EUVD-2017-12036
Malware in sbrugna...
EUVD-2017-12033
Malware in sbrugna...
EUVD-2019-11960
Malware in sbrugna...