CVE-2014-0816

CVE-2014-0816 这是针对CVE-2014-0816 JVNDB-2014-000026：Norman Security Suite 权限提升漏洞 的利用程序。 该利用程序通过利用 ngs.sys / ngs64.sys 中 IOCTL 处理程序的漏洞，从非管理员权限启动具有 SYSTEM 权限的 CMD.exe。 用法 root@kitploit: C:\Users\user\Desktop exploitngs.exe Exploit Norman General Security Driver ngs.sys / ngs64.sys Target file version...

CVE-2026-29923

CVE-2026-29923 - Escalada Local de Privilegios mediante el Mapeo Arbitrario de Memoria Física El controlador de kernel pstrip64.sys expone un IOCTL que permite a usuarios con bajos privilegios mapear rangos arbitrarios de memoria física en su propio espacio de direcciones virtuales. Esta primitiv...

CVE-2025-61155

CVE-2025-61155: Terminación Arbitraria de Procesos en GameDriverX64.sys https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab Resumen Este repositorio contiene el aviso de seguridad y el PoC para CVE-2025-61155. El controlador anti-trampas GameDriverX64.sys permite a...

Terminator_Killer

Terminator - Asesino de Procesos para Red Team Una herramienta de terminación de procesos en modo kernel que aprovecha un controlador vulnerable CVE-2026-0828 para terminar procesos protegidos desde el modo usuario. Compilación Requiere MinGW-w64 GCC en Windows. Compile con: root@kitploit: g++ --...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure that info-enable callback is always set. The ioctl and sysfs handlers call the -enable callback unconditionally. Not all drivers implement this callback, resulting in NULL dereferencing. Examples of affected drivers:...

cve-2025-7771

CVE-2025-7771 — LPE con ThrottleStop.sys Prueba de concepto para CVE-2025-7771. ThrottleStop.sys expone dos manejadores IOCTL que permiten lectura/escritura arbitraria de memoria física sin control de acceso: cualquier proceso administrador puede leer o escribir en cualquier parte de la RAM físic...

Lenovo-CVE-2025-8061

CVE-2025-8061 es una vulnerabilidad de escalada de privilegios en el controlador LnvMSRIO.sys de Lenovo. El controlador expone manejadores de IOCTL que permiten a cualquier proceso en modo usuario incluyendo usuarios sin privilegios realizar lo siguiente: Leer/escribir arbitrariamente Registros...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Fecha del proyecto: feb 2026 / Se descubrió una vulnerabilidad de desbordamiento de búfer en el manejador de IOCTL del controlador de kernel pwdrvio.sys. La vulnerabilidad permite que un atacante local sin privilegios corrompa la memoria del pool del kernel,...

CVE-2026-80113

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the...

CVE-2026-80118

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) contain an unauthenticated physical memory disclosure in DirectIo64.sys . A single IOCTL with no caller-identity check allows unprivileged local users to write a crash-...

CVE-2026-80113

PassMark PerformanceTest , BurnInTest , and OSForensics are affected by a local privilege escalation vulnerability in the DirectIo64.sys kernel driver. The root cause is a missing validation of the physical address parameter in an exposed IOCTL handler , allowing a local user to supply an arbitra...

CVE-2026-80113 PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the...

EUVD-2026-71684

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the...

CVE-2026-82670

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRPMJDEVICECONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early...

CVE-2026-82670

IObit Uninstaller 15.5.0.11 is affected by a flaw in the IRP_MJ_DEVICE_CONTROL function of the IUForceDelete.sys kernel-mode driver (IOCTL Handler). The underlying cause is improper privilege management , which a local attacker can exploit with low complexity to gain partial integrity and availab...

EUVD-2026-68454

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRPMJDEVICECONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early...

CVE-2026-82670 IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRPMJDEVICECONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early...

VulnCheck KEV: CVE-2026-36425

An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...

The vulnerability of the xe_vm_madvise_ioctl() function in the drivers/gpu/drm/xe/xe_vm_madvise.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xevmmadviseioctl function in the drivers/gpu/drm/xe/xevmmadvise.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a...

CVE-2026-72482

In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptorbusy in commandioctl commit d1857f8296dc "gpib: fix use-after-free in IO ioctl handlers" introduced a descriptorbusy reference counter to pin struct gpibdescriptor across IO ioctl operation...