ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : ThrottleStop 드라이버를 통한 임의 물리 메모리 및 I/O 포트 읽기/쓰기 ThrottleStop은 CPU 스로틀링을 모니터링하고 수정하는 데 사용되는 작은 정식 애플리케이션입니다. 이 작업을 수행하는 드라이버가 있으며, 대부분 입력 검증이 없습니다. 취약한 IOCTL IOCTL| 취약점 ---|--- 0x80006498| 임의 메모리 읽기 0x8000649C| 임의 메모리 쓰기 0x80006430| 임의 포트 읽기 0x80006434| 임의 포트 쓰기 또한 임...

Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 POC локального повышения привилегий авторы: chompie и b33f 复现文章:hlingxbm Только для демонстрации. Полный эксплойт работает на уязвимых системах Windows 11 22H2. Примитив записи работает на всех уязвимых системах. Использование: root@kitploit: WindowsAFDLPECVE-2023-21768.exe где — э...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Локальное повышение привилегий POC авторы: chompie и b33f Только для демонстрации. Полный эксплойт работает на уязвимых системах Windows 11 22H2. Примитив записи работает на всех уязвимых системах. Использование: root@kitploit: WindowsAFDLPECVE-2023-21768.exe где — идентификатор...

network-monitor

Сетевой монитор Инструмент мониторинга сетевых подключений в реальном времени, написанный на Rust и GTK4, отображающий активные подключения с живой статистикой ввода/вывода в современном графическом интерфейсе. Возможности Мониторинг в реальном времени : непрерывно отслеживает активные сетевые...

Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 ローカル権限昇格 POC 著者: chompie デモンストレーション目的のみです。完全なエクスプロイトは、脆弱性のある Windows 11 22H2 システムで動作します。 脆弱性のあるすべてのシステムへの適用は読者の課題とします。上手くなれ、など。 使用方法: root@kitploit: WindowsMSKSSRVLPECVE-2023-6802.exe ここで、 は昇格させるプロセスのプロセス ID（10進数）です。 これにより、対象プロセスが SYSTEM に昇格します。 I/O Ring LPE プリミティブコードは、Yarden Shafi...

apatchy

apatchy Apache HTTPD를 위한 인프로세스 퍼징 프레임워크 apatchy를 사용하면 네트워크 I/O 없이 Apache의 전체 HTTP 요청 처리 파이프라인파싱, 훅, 필터, 핸들러을 퍼징할 수 있습니다. Apache의 소켓 계층을 사용자 정의 I/O 필터로 교체하여 실제 HTTP 트래픽을 처리하는 것과 동일한 코드 경로에 원시 바이트를 직접 공급합니다. 기능 다양한 빌드 트리 및 구성 관리 커버리지 리포트 생성 사용자 정의 인트로스펙션: LLVM 콜 트리 분석 Harness 및 Proto 뮤테이터 관리자 버그 분류...

CVE-2026-89578

A flaw was found in the Linux kernel's device mapper I/O dm-io component. When handling DMIOBIO requests, incorrect sector-based accounting for misaligned direct I/O buffers could lead to an infinite loop. This issue can cause I/O operations to hang indefinitely, resulting in a denial of service...

CVE-2025-21333-POC

CVE-2025-21333-POC Доказательство концепции, эксплуатирующее CVE-2025-21333 в vkrnlintvsp.sys не очень надежно, см. раздел Требования и ограничения. В разделе Ссылки находятся очень полезные ресурсы для тех, кто хочет поиграться с эксплойтом. Подробный анализ уязвимости и эксплойта доступен здесь...

CVE-2026-89751

A flaw was found in the Linux kernel's x86/tdx component. An off-by-one error in the handlein and handleout functions, specifically in the GENMASK calculation for port I/O operations, causes the mask to be one bit too wide. This incorrect handling of I/O sizes could potentially lead to unintended...

CVE-2026-89644

A flaw was found in the Linux kernel's btrfs filesystem. When performing direct I/O writes in a NOCOW No Copy-On-Write range, an extent map reference may not be properly released if an error occurs during extent creation. This oversight can lead to an extent map leak, potentially causing memory...

CVE-2026-89751

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

CVE-2026-89644

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

CVE-2026-89584

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate use...

EUVD-2026-76663

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

CVE-2026-89751

CVE-2026-89751 is an off-by-one error in the Linux kernel's x86 TDX (Trusted Domain Extensions) port I/O handling. The functions handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c compute a bitmask using GENMASK(BITS_PER_BYTE * size, 0). Since GENMASK(h, l) includes bit h , this produces a m...

CVE-2026-89751 x86/tdx: Fix off-by-one in port I/O handling

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

EUVD-2026-76556

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

CVE-2026-89644 btrfs: fix extent map leak in NOCOW direct I/O write

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfsdioiomapbegin calls btrfsgetextent, which returns an extent map reference that must be dropped on all exit paths. For direct writes into a NOCOW range,...

CVE-2026-89644

CVE-2026-89644 affects the btrfs filesystem in the Linux kernel. The root cause is an extent map reference leak in the NOCOW direct I/O write path: btrfs_get_blocks_direct_write() fails to drop the extent map obtained from btrfs_get_extent() when btrfs_create_dio_extent() returns an error (e.g., ...