CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Множественные локальные уязвимости повышения привилегий в драйвере Little Orbit GFAC GFACSysx64.sys | ---|--- Идентификаторы CVE| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Производитель| Little Orbit Продукт| Драйвер GamersFirst Anti-Cheat GFAC GFACSysx64.sys Затронутые версии| Информация о...

Improper Neutralization Of Special Elements In Data Query Logic

MongoDB Python Driver is vulnerable to Improper Neutralization of Special Elements in Data Query Logic. The vulnerability is due to improper handling of caller-supplied structured file identifiers, which allows an authenticated attacker to manipulate GridFS queries to access unintended stored fil...

CVE-2026-98361

A flaw was found in the Linux kernel's RDMA over Converged Ethernet rxe driver. This flaw allows a local attacker to achieve privilege escalation by overwriting arbitrary read-only files. Missing write permission checks during On-Demand Paging ODP operations allow an unprivileged user to map memo...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

cve-2022-49186-research

CVE-2022-49186: 리눅스 커널 권한 상승 연구 개요 CVE-2022-49186를 위한 보안 연구 및 개념 증명 익스플로잇입니다. 이는 Visconti 클록 드라이버의 배열 오버플로를 통해 로컬 권한 상승을 가능하게 하는 리눅스 커널 취약점입니다. 취약점 상세 유형 : 부호 없는 변환으로 인한 배열 오버플로 CVSS 점수 : 7.8 높음 영향 : 루트로의 로컬 권한 상승 영향받는 버전 : Linux 커널 5.17.0 - 5.17.1 저장소 내용 CVE-2022-49186.pdf - 전체 연구 논문...

CVE-2026-98355

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem. When connection path initialization fails in the RDMA Transport RTRS driver, error cleanup routines invoke event tracing before the associated object name is set. This issue leads to a null pointer dereference,...

CVE-2026-98353

A flaw was found in the Linux kernel's erdma Elastic Remote Direct Memory Access driver. A local user could cause a Denial of Service DoS through a system deadlock during concurrent queue creation and hardware interrupt handling. Because internal queue updates do not use interrupt-safe locking, a...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

cve-2021-21551-PoC

cve-2021-21551-PoC В этом репозитории содержится PoC, который я сделал при слепом анализе драйвера dbutil23.sys на уязвимости. Он был создан на основе личного анализа без чтения разборов и даже без знания того, какие CVE существуют в этом драйвере. Всё, что я знаю, — этот драйвер каким-то образом...

CVE-2021-42008

CVE-2021-42008 리눅스 6pack 드라이버의 16년 된 취약점 악용 참고 https://syst3mfailure.io/sixpack-slab-out-of-bounds...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

PT-2026-107654

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS encryption gssEncMode=prefer or require, and the server stores the value without an error. The buffer is 16320 bytes...

PT-2026-107718

pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...

PT-2026-107717

Name of the Vulnerable Software and Affected Versions pgjdbc versions 42.7.11 through 42.7.13 Description The PostgreSQL JDBC Driver fails to enforce restrictions when the requireAuth connection property excludes all six known authentication methods e.g.,...

Security update for wpa_supplicant (important)

openSUSE security update: security update for wpasupplicant ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22022-1 Rating: important References: bsc1280914 Cross-References: CVE-2026-78807 CVSS scores: CVE-2026-78807 SUSE : 7.1...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

KDU

KDU 커널 드라이버 유틸리티 시스템 요구 사항 x64 Windows 7/8/8.1/10/11; 관리자 권한이 필요합니다. 목적 및 기능 이 도구의 목적은 광범위한 설정이나 로컬 디버거 없이 Windows 커널/구성 요소를 탐색할 수 있는 간단한 방법을 제공하는 것입니다. 다음 기능을 제공합니다: EPROCESS 객체 수정을 통한 임의 PPL 또는 임의 프로세스 핸들을 이용한 보호된 프로세스 하이재킹; 드라이버 서명 적용 우회 DSEFix와 유사; 드라이버 서명 적용을 우회하기 위한 드라이버 로더 TDL/Stryker와 유사;...

CVE-2026-90202

A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...

CVE-2026-90136

A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys ローカル特権昇格 CVE-2026-29923 の最小限の概念実証です。これは pstrip64.sys カーネルドライバ（EnTech Taiwan PowerStrip ≤ 3.90.736）の脆弱性で、非特権ユーザーモードプロセスが NT AUTHORITY\SYSTEM に昇格できるものです。 バグ pstrip64.sys は IOCTL（0x80002008）を公開しており、ユーザー提供の物理アドレスを受け取り、\Device\PhysicalMemory を開いて現在のプロセスハンドルで...