474 matches found
lvi-lfb-attack-poc
LVI-LFB制御フローハイジャック攻撃（CVE-2020-0551）のPoC このリポジトリには、LVI-LFB制御フローハイジャック攻撃のPoCのソースコードが含まれています。 内容 lvi-cfh-poc - ラインフィルバッファスプレーを介して別のプロセスの制御フローをハイジャックする ホワイトペーパー 前提条件 1. Visual Studio 2015 2. 脆弱性のあるIntel CPU 著者 Andrei Vlad LUȚAȘ Dan Horea LUȚAȘ 参考資料 Bitdefenderのブログ記事:...
meltdown
Meltdown 概念验证 本仓库包含多个应用程序，用于演示 Meltdown 漏洞。关于该漏洞的技术信息，请参阅论文： Meltdown，作者为 Lipp、Schwarz、Gruss、Prescher、Haas、Mangard、Kocher、Genkin、Yarom 和 Hamburg 本仓库中的应用程序基于 libkdump 构建，这是我们为论文开发的库。该库通过自动适应环境的某些特性，简化了对该漏洞的利用。 视频 本仓库包含多个演示 Meltdown 的视频 视频 1 展示了如何使用 Meltdown 实时监视密码输入。 视频 2 展示了 Meltdown 如何泄露物理内存内容。 ...
ExecASLR-ekoparty
ExecASLR - 利用Intel分支预测器绕过ASLR 什么是ASLR 地址空间布局随机化（ASLR）是一种用于增加内存破坏攻击利用难度的缓解机制。例如，在缓冲区溢出漏洞场景中，试图构造返回导向编程（ROP）利用的攻击者需要知道链中gadget的地址。如果被利用的二进制文件的代码段被随机化，那么攻击者就很难为exploit选择正确的地址，从而使得利用不可行。 以下示例展示了地址如何被随机化： include void DoNothing; void codePtr = DoNothing; void DoNothing int mainint argc,char argv...
prefetch-tool
Windows KASLR 预取工具 一个用于在 Windows 11 上绕过 KASLR（内核 ASLR）的概念验证工具。灵感来自针对 Linux 的 EntryBleed。 该工具是作为针对 Windows 11 24H2 的漏洞利用的一部分而开发的。我完全不是侧信道方面的专家，因此这对我来说是一个全新的领域，代码也写得非常粗糙 😳 非常欢迎帮助提高不同 CPU 类型下的可靠性。 我只用手头的机器做了有限的测试。我发现我实现的技术在现代 Intel CPU 上相当可靠，但在 AMD 上则差很多。 CPU 支持 CPU| 状态 ---|--- Intel| 🟢 可靠 AMD| 🟡 不稳...
SUSE-SU-2026:23602-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...
SUSE SLES11 Security Update : microcode_ctl (SUSE-SU-2026:4019-1)
The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4019-1 advisory. - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading t...
RockyLinux 9 : microcode_ctl (RLSA-2026:68011)
The remote RockyLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2026:68011 advisory. kernel: hypervisor: Intel Processors: Privilege escalation in Ring 0 via improper value handling CVE-2025-35973 kernel: microcodectl: Intel Xeon 6...
microcode_ctl security, bug fix, and enhancement update
4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...
Security update for microcode_ctl
This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20260812 release bsc1274785 Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. Intel CPU Microcode was updated to the 20260811 release bsc1274785 Security...
SUSE-SU-2026:4019-1 Security update for microcode_ctl
This update for microcodectl fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...
CVE-2026-8798 Native entropy source retries the CPU entropy instructions without limit
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...
OESA-2026-2529 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information...
OESA-2026-1420 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
OESA-2026-1418 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
OESA-2026-1419 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
OESA-2026-1422 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper handling of values in the microcode flow for some IntelR Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity atta...
CLSA-2026-1770312389 Update of microcode_ctl
Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000410; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000650; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
CLSA-2026-1770213436 Update of microcode_ctl
Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 SPR-HBM B3 microcode in microcode.dat at revision 0x2c000410; - Addition of cpuid:806F8/0x87 SPR-SP E5/S3 microcode in microcode.dat at revision 0x2b000650; - Addition of cpuid:90672/0x07 ADL-HX/S 8+8 C0 microcode in...
