GDRVLoader

GDRVLoader - Windows 10-11で未署名ドライバをロード 元は https://github.com/fengjixuchui/gdrv-loader に基づいていますが、最新のWindowsバージョンのサポートと改良が追加されています。 追加機能 PatchGuardに検出されずにWindows 10-11で未署名ドライバをロードします。 脆弱なドライバのバイトロードの追加による移植性の向上 CRT互換性、よりクリーンなコードと使いやすさを実現。 シンプルでユーザーフレンドリーなコマンドラインインターフェース 使い方 1. 最新リリースをダウンロードします。 2. ...

MSI_FeatureManager_CVE

KernCoreLib64.sys 脆弱性 PoC 物理メモリおよびI/Oポートの悪用による特権昇格...

CVE-2021-27965

CVE-2021-27965 CVE-2021-27965 を悪用して、システム cmd を起動することで LPE を行うシンプルな PoC。 https://vulners.com/cve/CVE-2021-27965 署名された MICSYS Windows ドライバー MsIo64.sys に問題が発見され、ローカルシステム全体が侵害される可能性があります。このドライバーの ioctl ディスパッチルーチンは、すべての IOCTL コードにおいてスタックベースのバッファオーバーフローが発生し、さらにユーザー指定バッファの検証も欠如しています。 IOCTL...

etherleak-checker

Etherleak 脆弱性チェッカー このPythonスクリプトは、ネットワークパケットのパディングデータを解析することで、対象ホストのEtherleak（CVE-2003-0001）脆弱性を検出するのに役立ちます。このスクリプトはScapyを使用して、さまざまなタイプの要求（ICMP、ARP、TCP）を送信し、レスポンスにメモリの機密内容を漏えいさせる可能性のあるパディングデータが含まれているかどうかをチェックします。 Etherleak の概要 Etherleak...

CVE-2025-61155

CVE-2025-61155：GameDriverX64.sys 中的任意进程终止 https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab 概述 本仓库包含 CVE-2025-61155 的安全公告和 PoC。GameDriverX64.sys 反作弊驱动程序通过一个有漏洞的 IOCTL 处理程序，允许任何本地用户终止任意进程。 概念验证 PoC 源代码 演示了与驱动程序进行通信以终止指定进程的过程。 免责声明...

ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the USB Video Driver driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the USB Video Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

ROS-20261006-73-0024

The vulnerability of the icesetringparam function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this...

ROS-20261006-73-0097

The vulnerability of the amdgpubocreatelistentryarray function in the drivers/gpu/drm/amd/amdgpu/amdgpubolist.c source file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system leads to unmanageable resource consumption. Exploiting this vulnerability c...

ROS-20261006-73-0080

The vulnerability of the mvpp2bmswitchbuffers function in the drivers/net/ethernet/marvell/mvpp2/mvpp2main.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-98198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: pwm-fan Stop RPM timer before freeing tach data sampletimer rearms the RPM timer and accesses the devm-managed ctx-tachs and ctx-pulsesperrevolution...

RockyLinux 8 : kernel-rt (RLSA-2026:75746)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

ROS-20261006-73-0113

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

PT-2026-106348

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

AlmaLinux 8 : kernel-rt (ALSA-2026:75746)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75746 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

Linux Distros Unpatched Vulnerability : CVE-2026-98238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: wwan: t7xx: validate the netif index in t7xxccmnirecvskb The netif index carried in the DPMAIF PIT header is five bits wide, but ccmniinst only has room fo...

ROS-20261006-73-0366

The vulnerability of the acpiecsetup function in the drivers/acpi/ec.c file of the Linux ACPI configuration and power management extension driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

RockyLinux 8 : kernel (RLSA-2026:75747)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75747 advisory. kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in gdlmputlock...

Linux Distros Unpatched Vulnerability : CVE-2026-98262

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libahci: clear PxCLBU and PxFBU for AHCIHFLAG32BITONLY A user reported that commit 105c42566a55 ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 made...