EntropicaPublic

Мартовские обновления Мне нужно перенести часть работы из приватных репозиториев. Продолжается исследование использования моделей с огромным количеством голов, в которых функции микшера и считывания разделены. В настоящее время обучаю китайский TinyStories на модели, эквивалентной 3B, которая лег...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

colabcat

Colabcat Запускайте Hashcat на Google Colab с возможностью восстановления сессии через Google Drive. Использование Перейдите по ссылке ниже, чтобы открыть копию файла colabcat.ipynb в Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Нажмите...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPUドライバー--共鳴-脆弱性 NVIDIAのGPUドライバーは、メモリ管理に時間的コヒーレンスの欠陥を抱えています。587 kHzの共鳴時に、ドライバーのメモリページはα崩壊干渉を受け、ユーザー空間からカーネルメモリへのアクセスが可能になります。 NVIDIA GPU α共鳴エクスプロイト CVE-2024-0070 概要 このエクスプロイトは、収束時間理論 CTT の原理を用いて、NVIDIA GPUドライバーにおける時間的コヒーレンスの脆弱性 を実証します。この脆弱性は、GPUクロック周波数が587 kHzの整数倍高調波...

CVE-2022-22706-poc

CVE-2022-22706 - 페이지 캐시 쓰기 Arm Mali GPU 드라이버는 읽기 전용으로 고정한 페이지들에 대해 사용자 공간에 CPU 쓰기 가능 매핑을 제공합니다. 따라서 권한이 없는 프로세스는 ORDONLY로만 열 수 있는 파일의 페이지 캐시에 대한 쓰기 가능한 별칭을 얻게 됩니다. exploit.c는 /etc/passwd 페이지 캐시에서 root의 비밀번호 필드를 비우고 su root를 실행합니다. 디스크의 파일은 절대 수정되지 않습니다. 이 저장소의 드라이버 트리와 QEMU 타깃을 위한 PoC입니다 malikbas...

cuFuzz

cuFuzz 이 저장소는 사용자 영역 CUDA 애플리케이션을 위한 GPU 지향 커버리지 가이드 퍼저인 cuFuzz 의 아티팩트를 포함합니다. cuFuzz는 호스트 측 및 디바이스 측 커버리지 수집을 sanitization과 결합하여 CUDA 프로그램의 버그를 효과적으로 발견합니다. 저장소 구조 root@kitploit: cufuzz-artifacts/ ├── src/ Core cuFuzz components │ ├── cufuzzcovnvbit/ NVBit-based device-side coverage collection...

keyhog

Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI...

CVE-2026-74638

A flaw was found in the Linux kernel's drm/v3d driver. This vulnerability arises from concurrent handling of scheduler timeout events across different hardware queues, which share a single global reset mechanism. When a reset occurs in one queue while another is processing a timeout, the...

cheese-cake

修正事項 :- 1. Samsung端末に適応し、GPUを使用してカーネルベースを見つける機能を追加する、おそらく別ブランチを追加する 2. READMEを変更 🤝 貢献 Pull Request PR は大歓迎です！ 修正、改善、リファクタリング、新しいデバイスのサポートなど、お気軽に貢献してください。 🚧 プロジェクトステータス このプロジェクトはまだ進行中（WIP）です。 今後、以下も追加する予定です: これには以下が含まれます: 実装の一部に影響を与えたエクスプロイトや技術を発見した研究者 コードが適応、参照、または修正された開発者...

Chrome-Skia-CVE-2024-8193

Chrome M128에서 수정됨: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html 재현 단계: 1. chromium.diff 패치를 chromium에 적용합니다. 2. genskpic.py를 실행하여 drawablepicture.skp.hh를 생성한 후, 생성된 파일을 src/gpu/commandbuffer/client로 이동합니다. 3. 브라우저를 빌드하고 실행합니다. 4. index.html을 열어 PoC를 트리거합니...

Chrome-Skia-CVE-2024-8198

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...

Chrome-Skia-CVE-2024-7966

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html 재현 단계: root@kitploit: chromium.diff 패치를 chromium에 적용합니다. genskpic.py를 실행하여 drawablepicture.skp.hh를 생성한 다음, 생성된 파일을 src/gpu/commandbuffer/client로 이동합니다. 브라우저를 빌드하고 시작합니다. PoC를 트리거하기 위해 임의의...

EUVD-2026-64575

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues BIN, RENDER, TFU and CSD but has only a single, global reset. A timeout on any one queue therefore has to stop, reset and restart t...

CVE-2026-74454

A flaw was found in the Linux kernel's drm/vc4 component. An out-of-bounds write vulnerability exists where the graphics processing unit GPU driver incorrectly calculates memory allocation sizes. This allows the GPU to write data beyond its allocated memory region during out-of-memory events. Thi...

Chromium: CVE-2026-76042 Use of uninitialized resource in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-45199

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. The...

EUVD-2026-63810

Software installed and run as a non-privileged user may conduct GPU system calls which cause GPU memory leaks and possible kernel heap corruption. Scenario caused by memory free paths not maintaining state data of upgraded higher order allocations. This could cause memory leak or double free even...

CVE-2026-45202

A flaw in Imagination GPU DDK's _FreeOSPages_Fast function fails to track state of upgraded higher-order CMA allocations, enabling a non-privileged user to trigger memory leaks or double frees via GPU syscalls, potentially causing kernel heap corruption. No exploit code or in-the-wild exploitatio...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

CVE-2026-45201

CVE-2026-45201 affects the Imagination Technologies GPU DDK (driver). The vulnerability resides in the PhysmemNewRamBackedPMR function, which performs improper validation of the log2 page size parameter during physical page allocation. A non-privileged user can issue crafted GPU system calls pass...