217 matches found
CVE-2022-25949
CVE-2022-25949 Kingsoft Antivirus KWatch Driver（バージョン2009.3.17.77）におけるローカルのEoP脆弱性の、数年前のエクスプロイトです。 2009年...？ この問題を2014年1月に報告し、8年以上後にCVEの通知を受けました。自分の古いコードを見つけられ、それだけの時間がかかったことが面白いので、これをアップロードすることにしました。 したがって、新しいCVEにもかかわらず、これは新しい脆弱性ではないはずです。簡単な検索で、既に同じように見える脆弱性の報告が複数あることがわかりました。 タイムライン...
CVE-2025-60719-AFD.SYS
!IMPORTANT 此概念验证仅用于演示和学习目的。请谨慎使用。 CVE-2025-60719-AFD.SYS Akamai 研究人员创建了一项新的人工智能能力，用于即时根因分析。该工具是一个名为 Patchdiff-AI 的监督式多智能体系统。在本文中，我们利用它对影响所有 Windows 版本的 CVE-2025-60719 进行深入分析。 !NOTE 该工具及研究成果将于12月10日星期三在伦敦 ExCeL 的 Black Hat Europe Arsenal 上展示。 漏洞 ：Windows WinSock...
CVE-2026-0075
CVE-2026-0075 ContactsProvider 研究 PoC 一个受控实验室环境下的 Android 研究原型，用于评估 ContactsProvider2 中与 CVE-2026-0075 相关的可观察行为。 概述 CVE-2026-0075 是 ContactsProvider2 中的一个 Android 本地权限提升问题。公开公告描述了一条无需用户交互、即可通过 SQL 注入访问联系人数据库的可能路径。Android 将该问题列为高 危，并指出受影响的 AOSP 版本为 Android 14、15、16 和 16-qpr2。安全补丁级别为 2026-06-05...
CVE-2025-32463-Chwoot-POC
CVE-2025-32463 Sudo EoP Exploit PoC Rust 使用预构建的二进制文件 1. 克隆仓库并在目标机器上运行二进制文件。 root@kitploit: git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git cd CVE-2025-32463-Chwoot-POC ./exploit 从源码构建 1. 克隆仓库（如果尚未完成） root@kitploit: git clone...
CVE-2024-20656
CVE-2024-20656 VSStandardCollectorService150 サービスにおける EoP の PoC https://www.mdsec.co.uk/2024/01/cve-2024-20656-local-privilege-escalation-in-vsstandardcollectorservice150-service/...
CVE-2024-30051
CVE-2024-30051 — Windows DWM 堆溢出 EoP · 硕士论文研究 -orange Windows 桌面窗口管理器（dwmcore.dll）中的堆缓冲区溢出 本地权限提升 → 通过 DWM 进程获得 SYSTEM 完整性级别 构建目标：Windows 11 22H2 10.0.22621.3447 · 补丁：KB5037771 描述 本仓库包含我针对 CVE-2024-30051 的 硕士论文研究 ，这是 Windows 桌面窗口管理器核心库（dwmcore.dll）中的一个高严重性（CVSS 7.8）权限提升 漏洞。 该漏洞源于...
CVE-2025-63945-Tencent-iOA-EoP
CVE-2025-63945 Tencent iOA 权限提升 版本：210.9.28693.62001 之前 摘要：我发现腾讯电脑管家存在一个漏洞，其中 C:\Windows\Temp 下的文件和目录处理不安全。攻击者可以利用符号链接（symlink）攻击，强制一个 SYSTEM 权限的进程删除任意文件，从而导致本地权限提升。具体来说，当使用“ioa”组件时，会定期启动一个名为 LegacyKBioawin.exe 的进程。在运行过程中，它会在 Temp 文件夹下创建 TencentDownload 目录，将文件下载至该目录中，然后以 SYSTEM...
CVE-2026-69451-PoC
Fastprox EOP CVE-2026-69451 的 PoC，博客文章位于 https://fj016.fr/blog/cve-2026-69451-en 使用方法 root@kitploit: fastproxeop.exe --cmd "whoami /all" --out "filename.txt"...
zabbix-template-CVE-2020-1472
zabbix-template-CVE-2020-1472 Plantilla de Zabbix para monitorear eventos del Visor de eventos de Windows relacionados con la vulnerabilidad de elevación de privilegios de Netlogon - CVE-2020-1472. Monitorea los ID de evento 5827, 5828 y 5829...
CVE-2026-74697
A flaw was found in the Linux kernel's bnxten driver. This vulnerability occurs when End of frame padding EOP on the AGG ring overlaps with subsequent data segments. On older network chips, if Relaxed Ordering RO is active, this overlap can cause valid data to be overwritten with zeros. This can...
SUSE CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
AZL-97104 CVE-2026-74697 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
UBUNTU-CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
EUVD-2026-64384
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697
This vulnerability affects the bnxt_en driver in the Linux kernel, used for Broadcom NetXtreme network adapters. When Total Packet Assembly (TPA) is enabled, End of frame padding (EOP) on the AGG ring can overlap with the next data segment. If Relaxed Ordering (RO) is active, the zero padding may...
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
PT-2026-79702
In the Linux kernel, the following vulnerability has been resolved: bnxt en: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...