RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape per RealWorld CTF 2020/2021 Demo Cosa? Questa è la nostra soluzione per la sfida "Box Escape" di RealWorld CTF dalle qualificazioni 2020/2021. Attualmente una 0day ma aggiungeremo il numero CVE appena ci sarà. CVE-2021-2119 Come funziona?...

Zapscape

La trilogia dell'escape KVM ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Escape da guest a host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Zapscape CVE-2026-64561 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una...

ITScape

ITScape: Fuga da guest a host in KVM/arm64 Abstract Questo documento descrive la vulnerabilità ITScape CVE-2026-46316 segnalata e corretta da Hyunwoo Kim @v4bel. Si tratta di una vulnerabilità di escape KVM che consente a un guest di evadere verso l'host in un ambiente KVM/arm64 ed eseguire coman...

Januscape

Januscape: Fuga da Ospite a Host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Januscape CVE-2026-53359 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una vulnerabilità di fuga da KVM che consente a un ospite di sfuggire all'host in un ambiente KVM/x86. Al meglio della...

itscape

ITScape — Sito di monitoraggio della fuga guest-to-host KVM/arm64 di Linux Sorgente del tracker dello stato delle patch ITScape : un sito a pagina singola che registra quali distribuzioni hanno distribuito una correzione per la fuga guest-to-host KVM/arm64 nel kernel Linux. Dove trovare i fatti...

Januscape-Hotfix

Raccolta di correzioni Januscape — CVE-2026-53359 English Raccolta completa di correzioni per la vulnerabilità di fuga dalla macchina virtuale KVM/x86 shadow MMU CVE-2026-53359. Dalla correzione a caldo con zero downtime all'aggiornamento del kernel, copre tutti gli scenari operativi. Diagnostica...

januscape

Januscape — Tracking-Website für den Linux-KVM/x86-Guest-to-Host-Escape Quellcode für den Januscape -Patch-Status-Tracker: eine einseitige Website, die verzeichnet, welche Distributionen einen Fix für den KVM/x86-Guest-to-Host-Escape im Linux-Kernel ausgeliefert haben. Wo die Fakten zu finden sin...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Побег из гостевой в хостовую Januscape — это уязвимость ядра Linux KVM, вызванная состоянием Use-After-Free UAF в x86 Shadow MMU. При уязвимых конфигурациях вредоносная гостевая система может повредить память хоста, что приводит ...

CVE-2026-47243 Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines VMs that perform like containers. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a guest-root to host-root escape. In this configuration, Kata runs the host...

EUVD-2020-27254

Malware in sbrugna...

CVE-2020-6100

An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver. A specially crafted pixel shader can cause memory corruption vulnerability. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2023-4155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a doubl...

kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

Race condition

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

CVE-2023-4155 Sev-es / sev-snp vmgexit double fetch vulnerability

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

CVE-2023-4155

CVE-2023-4155 describes a vulnerability in the Linux kernel’s KVM AMD SEV implementation. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race that causes the VMGEXIT handler to be invoked recursively. If the handler is called multiple times, this can lead to a ...

CVE-2023-4155

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...

Fedora 37 : kernel (2023-d9509be489)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d9509be489 advisory. The 6.4.10 stable kernel update contains a number of important fixes across the tree. Tenable has extracted the preceding description block directly...

NVIDIA D3D10 Driver Shader Functionality dcl_input index memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1720 NVIDIA D3D10 Driver Shader Functionality dclinput index memory corruption vulnerability August 10, 2023 CVE Number CVE-2022-34671 SUMMARY A memory corruption vulnerability exists in the Shader Functionality of NVIDIA D3D10 Driver NVIDIA D3D10 Driver,...

CVE-2023-4155

A flaw was found in KVM AMD Secure Encrypted Virtualization SEV in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple time...