cve-2024-0519-rca-research

CVE-2024-0519 — RCA Исследование Артефакты анализа первопричин для CVE-2024-0519 выход за границы памяти V8, Chrome 120, эксплуатировался в реальных атаках. Исправление : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 Изученная версия V8 : 12.0.267.16 fbc4963bbff, ARM64 macO...

CVE-2024-1939

CVE-2024-1939 Ceci est un court rapport pour la CVE-2024-1939, que j'ai utilisée pour réclamer V8CTF M122. La cause racine de ce problème est le manque de prise en charge de kWasmS128 dans la conversion wasm-to-js. Plus précisément, les opérations wasmS128Const se produisant dans les piles de...

CVE-2022-1015

CVE-2022-1015 लक्ष्य: linux kernel 5.17.0 config: .config आवश्यकताएँ: root@kitploit: apt install libmnl-dev libnftnl-dev बिल्ड: root@kitploit: gcc exploit.c -o exploit -lmnl -lnftnl -lpthread -no-pie संदर्भ...

CVE-2021-21220

استغلال CVE-2021-21220 من سلوك JIT غير صحيح إلى تنفيذ كود عن بُعد نظرة عامة يشرح هذا العرض التقديمي استغلال CVE-2021-21220 ، وهي ثغرة في محرك V8 JavaScript في متصفح Google Chrome ناتجة عن افتراضات غير صحيحة لمُحسِّن JIT أثناء التحسين. يسير العرض التقديمي عبر: كيفية قيام V8 بالتجميع في الوقت المنا...

CVE-2025-40019-POC

CVE-2025-40019 के लिए प्रूफ ऑफ कॉन्सेप्ट CVE-2025-40019 एन्क्रिप्टेड सॉल्ट-सेक्टर इनिशियलाइज़ेशन वेक्टर मैकेनिज़्म crypto/essiv.c है जिसमें इनिशियलाइज़ेशन वेक्टर IV आकार के सापेक्ष एसोसिएटेड ऑथेंटिकेशन डेटा AAD लंबाई का अपर्याप्त सत्यापन होता है, जिससे आउट-ऑफ-बाउंड्स मेमोरी एक्सेस होती है। इस...

CVE-2021-1732

CVE-2021-1732 Die Schwachstelle tritt in der Windows-Grafiktreiberfunktion win32kfull!NtUserCreateWindowEx auf, verursacht durch eine fehlende Synchronisation zwischen der Kernel-Rückruffunktion zur Speicherzuweisung im Benutzermodus und der Einstellung der tagWND-flag-Eigenschaft. Dadurch kann d...

CVE-2021-32537

CVE-2021-32537: RTKVHD64 में सीमा-से-बाहर पहुँच जिससे पूल दूषण पूल कोरप्शन होता है। यह एक बग है जिसकी मैंने अप्रैल 2021 की शुरुआत में Realtek को सूचना दी थी। प्रभावित ड्राइवर का नाम RTKVHD64.sys है और यह कई मुख्यधारा हार्डवेयर पर उपलब्ध प्रतीत होता है नीचे दिए गए हार्डवेयर कॉन्फ़िगरेशन का परीक्षण...

CVE-2019-9810

CVE-2019-9810 Windows 版 Firefox 利用程序 CVE-2019-9810 是一个由 Richard Zhu 和 Amat Cama 在 Pwn2Own 2019 上发现并利用的漏洞。它影响了 Mozilla 的 JavaScript 引擎 Spidermonkey，并被用于实现渲染进程的攻破。 该问题已于大约两个月前在 mfsa2019-09 中修复。 问题概述 简而言之，该漏洞使得边界检查判定为冗余并被优化掉，从而允许代码访问越界内存。问题本身出在 Ion 管道的别名分析阶段。下图展示了 GVN...

CVE-2025-51495

Vorrei segnalare una vulnerabilità di sicurezza identificata nell'ultima release di Mongoose v7.17. Il problema risiede nel modulo WebSocket, in particolare nella funzione mgwscb responsabile della gestione dei frame WebSocket in ingresso. La funzione è vulnerabile a un integer overflow, che può...

CVE-2026-80566

This Linux kernel vulnerability affects the hynitron_cstxxx input driver. The root cause is insufficient validation of touch count and finger IDs against the allocated input slot range before processing touch reports. An out-of-range finger ID or an oversized touch count can corrupt the touch sta...

CVE-2026-74747

CVE-2026-74747 affects the Linux kernel IP Virtual Server (ipvs) subsystem. In the ip_vs_nat_icmp() function, a local process can modify the ihl (Internet Header Length) field, and after skb_ensure_writable() the kernel may see a larger value than originally validated. This leads to an out-of-bou...

CVE-2026-74737

CVE-2026-74737 affects the TI am65-cpsw-nuss Ethernet driver in the Linux kernel . On the packet reception path, the helper function cppi5_desc_get_tags_ids() copies the full 16-bit Source Tag from the RX DMA Descriptor into the port_id variable. However, only the lower 8 bits of that tag encode ...

EUVD-2026-66362

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data...

CVE-2020-0023

CVE-2020-0022 Sembra che Android 9-6 abbiano un sottosistema Bluetooth simile, mentre Android 5 e 4 sono diversi. Android 9.0 Esperimenti BlueFrag Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Di seguito ho raggiunto la condizione patchata...

kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...

kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...

d-os-descriptor

d-os-descriptor Zusammenfassung Das USB-Gadget-Subsystem enthält Sicherheitsprobleme im OS-Deskriptor-Handling-Abschnitt der compositesetup-Funktion composite.c. Die Verarbeitung von sorgfältig konstruierten Steuertransfer-Anforderungsnachrichten führt zu einem Geräteabsturz aufgrund einer...

CVE-2016-8863

Ziele pupnp release-1.6.18 ... ... läuft auf i386 Ubuntu 16.04. Behebung commit 9c099c2923ab "Behebe Zugriff außerhalb der Grenzen in createurllist CVE-2016-8863"...

CVE-2026-79775

rclone versions v1.72.0 through v1.74.4 are affected by multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser , which depends on the github.com/diskfs/go-diskfs library. The parser fails to validate attacker-controlled superblock and metadata values, enabling three d...

CVE-2026-79775 rclone Archive Backend SquashFS Parser Denial of Service

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...