20 matches found
ghostlock-aresin
GhostLock CVE-2026-43499 — POCO F3 GT aresin Data-only physmap overwrite exploit for MediaTek Dimensity 1200 MT6893. Kernel: 4.14.186-android13 / MIUI V14.0.4.0.TKJCNXM. ⚠️ Prerequisites Device : POCO F3 GT / Redmi K40 Gaming Edition codename: aresin Chipset : MediaTek Dimensity 1200 MT6893 OS :...
HVCIPwned
CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...
CVE-2025-38001
CVE-2025-38001 Drama Familiar de RBTree Use-After-Free en HFSC Eltree de Linux - PoC para Debian 12 Este PoC utiliza un ataque de solo datos a nivel de página basado en transformaciones de RBTree para comprometer el sistema. El exploit es portátil y funciona en todas las instancias de kernelCTF L...
CVE-2024-40431-CVE-2022-25479-EOP-CHAIN
CVE-2024-40431+CVE-2022-25479 chain for EOPDATA ONLY ATTACK A wise man said once "that rent is too damn high" and "give credit where credit is due" such shoutout to https://x.com/zwclose for finding and publishing a poc for these 2 bugs. Wereubensammut and vladupon asking him nicesly mearly tweak...
Intel-CVE-2015-2291
Intel-CVE-2015-2291 PoC exploit for CVE-2015-2291 Data-only attack to pop a system shell with the vulnerable intel driver. The code itselfs implements more "functionality" provided from the driver, like physical to virtual address translation, mapping physical memory This two combined = arbitrary...
DirtyCred
DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...
CVE-2026-64563_EXP
CVE-2026-64563EXP For experimental research only. The code for prefetch and nperm the memory reference set.gdb needs to be configured is not attached, and since it has not been optimized, the hit probability is low. The author noticed that the vulnerability author has already released relevant...
CVE-2024-0582-dataonly
CVE-2024-0582 Un ataque solo de datos basado en CVE-2024-0582 Descripción El exploit sigue la estrategia de esta publicación de blog, excepto que no usé un proceso hijo para abrir archivos. Encontré algunos exploits en GitHub que siguen la estrategia de este artículo. Después de reproducir el...
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
Summary Open WebUI renders vega and vega-lite fenced code blocks in chat content by building a Vega view in the viewer's browser without a restricted resource loader. Any user who can place such a block where another user will see it can make that user's browser issue attacker-chosen outbound GET...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock CVE-2026-43499 – Redmi K70 Ultra rothko A data-...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: powerpc64/ftrace: fixed the issue of module loading without patchable function entries. getstubssize assumes that there must always be at least one patchable function entry, which is not always the case modules that export dat...
EEF-CVE-2026-43968 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1
Summary Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow\sse:event/1 in cowlib guards the id and event fields against \n but not against bare \r, and the internal prefix\lines/2...
From Extortion to E-commerce: How Ransomware Groups Turn Breaches into Bidding Wars
Ransomware has evolved from simple digital extortion into a structured, profit-driven criminal enterprise. Over time, it has led to the development of a complex ecosystem where stolen data is not only leveraged for ransom, but also sold to the highest bidder. This trend first gained traction in...
SUSE CVE-2025-37898
In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix module loading without patchable function entries getstubssize assumes that there must always be at least one patchable function entry, which is not always the case modules that export data but no code,...
SUSE CVE-2025-37863
In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2024-0582 A data-only attack based on CVE-2024-0582 De...
Exploit for Missing Release of Memory after Effective Lifetime in Realtek Rtsper
CVE-2024-40431+CVE-2022-25479 chain for EOPDATA ONLY ATTACK...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911...