20 matches found
Intel-CVE-2015-2291
Intel-CVE-2015-2291 Exploit PoC para CVE-2015-2291 Ataque solo de datos para obtener un shell del sistema con el controlador vulnerable de Intel. El código en sí mismo implementa más "funcionalidad" proporcionada por el controlador, como la traducción de direcciones físicas a virtuales, mapeo de...
CVE-2024-40431-CVE-2022-25479-EOP-CHAIN
CVE-2024-40431+CVE-2022-25479 cadena para EOPDATA ONLY ATTACK Un sabio dijo una vez "that rent is too damn high" y "give credit where credit is due", un agradecimiento a https://x.com/zwclose por encontrar y publicar un PoC para estos 2 bugs. Nosotrosreubensammut y Vladdespués de preguntarle...
ghostlock-aresin
GhostLock CVE-2026-43499 — POCO F3 GT aresin Exploit de sobrescritura de physmap solo con datos para MediaTek Dimensity 1200 MT6893. Kernel: 4.14.186-android13 / MIUI V14.0.4.0.TKJCNXM. ⚠️ Requisitos previos Dispositivo : POCO F3 GT / Redmi K40 Gaming Edition codename: aresin Chip : MediaTek...
HVCIPwned
CVE-2024-35250 Escalación de privilegios local mediante desreferencia de puntero no confiable en el controlador Windows Kernel Streaming ks.sys. Exploit solo de datos: omite la integridad de código protegida por hipervisor HVCI. Resumen Campo| Detalle ---|--- CVE| CVE-2024-35250 Componente| ks.sy...
CVE-2025-38001
CVE-2025-38001 Drama Familiar de RBTree Use-After-Free en HFSC Eltree de Linux - PoC para Debian 12 Este PoC utiliza un ataque de solo datos a nivel de página basado en transformaciones de RBTree para comprometer el sistema. El exploit es portátil y funciona en todas las instancias de kernelCTF L...
DirtyCred
DirtyCred: Escalando Privilegios en el Kernel de Linux DirtyCred es un concepto de explotación del kernel que intercambia credenciales del kernel no privilegiadas por privilegiadas para escalar privilegios. En lugar de sobrescribir campos de datos críticos en el heap del kernel, DirtyCred abusa d...
CVE-2026-64563_EXP
CVE-2026-64563EXP Solo para investigación experimental. El código de prefetch y nperm se requiere configurar la referencia de memoria set.gdb no se adjunta; al no estar optimizado, la probabilidad de acierto es baja. El autor ha observado que el autor de la vulnerabilidad ya ha publicado...
CVE-2024-0582-dataonly
CVE-2024-0582 Un ataque solo de datos basado en CVE-2024-0582 Descripción El exploit sigue la estrategia de esta publicación de blog, excepto que no usé un proceso hijo para abrir archivos. Encontré algunos exploits en GitHub que siguen la estrategia de este artículo. Después de reproducir el...
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
Summary Open WebUI renders vega and vega-lite fenced code blocks in chat content by building a Vega view in the viewer's browser without a restricted resource loader. Any user who can place such a block where another user will see it can make that user's browser issue attacker-chosen outbound GET...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock CVE-2026-43499 – Redmi K70 Ultra rothko A data-...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: powerpc64/ftrace: fixed the issue of module loading without patchable function entries. getstubssize assumes that there must always be at least one patchable function entry, which is not always the case modules that export dat...
EEF-CVE-2026-43968 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1
Summary Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow\sse:event/1 in cowlib guards the id and event fields against \n but not against bare \r, and the internal prefix\lines/2...
From Extortion to E-commerce: How Ransomware Groups Turn Breaches into Bidding Wars
Ransomware has evolved from simple digital extortion into a structured, profit-driven criminal enterprise. Over time, it has led to the development of a complex ecosystem where stolen data is not only leveraged for ransom, but also sold to the highest bidder. This trend first gained traction in...
SUSE CVE-2025-37898
In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix module loading without patchable function entries getstubssize assumes that there must always be at least one patchable function entry, which is not always the case modules that export data but no code,...
SUSE CVE-2025-37863
In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly referring to a data layer, but there's no current use case for this. Originally, when data-only layers were introduced, this wasn't allowed, onl...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2024-0582 A data-only attack based on CVE-2024-0582 De...
Exploit for Missing Release of Memory after Effective Lifetime in Realtek Rtsper
CVE-2024-40431+CVE-2022-25479 chain for EOPDATA ONLY ATTACK...
Exploit for Heap-based Buffer Overflow in Gnu Glibc
GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911...