1797 matches found
Astra Linux – Vulnerability in opensc
The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...
cve-2023-29360
CVE-2023-29360 の PoC MSKSSRV.SYS ドライバを標的としたエクスプロイト 注意 このエクスプロイトをより良くするためのクールなトリックやヒントがあれば、いつでも提案を受け付けています : クレジット Thomas Imbert @masthoon from Synacktiv @Synacktiv...
AmdRyzenMasterCheat
ECPRO-LAN アンチチート: FACEIT, ESEA カスタムバージョン 2019年初頭～2020年後半。R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ 要件: 全アップデートを適用したWindows 10 Enterprise 1607 LTSB AMD Ryzen CPU マザーボード B350-B450 B550 クライアントはバグあり Logitech GHUB インストール済み マウス入力用 旧世代のRyzenプロセッサではAmdRyzenMasterドライバのバージョンが異なる可能性があります 1.3.0.0...
echoac-poc
CVE-2023-38817 关于 echo.ac 驱动中发现漏洞的 PoC 与详细分析。 CVE 信息 编号：CVE-2023-38817 厂商：Inspect Element Ltd 13017981，以 Echo 名义运营。 受影响产品：echo.ac 反作弊扫描工具。 受影响版本：echo.ac - 5.2.1.0，echodriver.sys - 所有已发布版本。 受影响操作系统：从 Windows 7 到 Windows 11 的 64 位 Windows 版本。 缓解措施：不要使用该软件，并将驱动签名加入黑名单。 证书已吊销 微软已将 Echo...
letsdefend-cve-2024-49138-investigation
LetsDefend 調査: CVE-2024-49138 🔍 概要 LetsDefend を使用した実践的な SOC 調査およびインシデントレスポンスシミュレーション — Windows CLFS ドライバーにおける特権昇格の脆弱性である CVE-2024-49138 の実世界での悪用に焦点を当てています。 📅 イベント詳細 イベント ID : 313 インシデントタイプ : 特権昇格 イベント時間 : 2025年1月22日 ホスト名 : Victor IP アドレス : 172.16.17.207 悪意のあるバイナリ : svohost.exe 親プロセス :...
EDRKiller
EDRKiller Use cve-2026-36425 killer edr，360 can killer Kills any antivirus processes, including but not limited to 360 Security and Huorong Security. I am exploiting a driver vulnerability for process manipulation, registering the driver via NT‑functions. No hiding is implemented. Compiled with...
CVE-2017-13672
CVE-2017-13672 针对 CVE-2017-13672 的 PoC（VGA Cirrus QEMU 驱动程序中的越界读取，导致拒绝服务攻击）...
CVE-2026-69393
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
CVE-2026-69384
Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...
CVE-2026-69384
A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...
CVE-2026-71345
CVE-2026-71345 is an out-of-bounds write vulnerability in the Windows driver Spaceport.sys that allows an authorized low-privilege attacker to achieve local code execution . The vulnerability is rated CVSS 3.1: 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that explo...
CVE-2026-69549
An out-of-bounds read in the Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally . The vulnerability is scored 7.0 (HIGH) by Microsoft with a vector of local attack, high complexity, and low privileges required, yielding high impact across confident...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Net: Ethernet: ti: am65-cpsw: Fix for freeing the IRQ in am65cpswnussremove Txchns. When obtaining the IRQ, we use k3udmagluetxgetirq, which returns a negative error value if there is an error. Therefore, checking if the IRQ is...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
An incorrect read request flaw was detected in the Infrared Transceiver USB driver within the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could exploit this flaw to deplete system resources, resulting in a denial of service or potentially causing the...
The vulnerability in the drivers/hid/hid-pl.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/hid/hid-pl.c component in the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/video/fbdev/vt8500lcdfb.c component of the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2026-74505
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a...
EUVD-2026-59032
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to...
