CVE-2024-1642470

Vulnerabilidad de ejecución remota de código en el controlador principal genérico USB de Windows CVE-2024-1642470 Descripción general Este repositorio contiene un código de explotación de prueba de concepto PoC y un script de detección para la vulnerabilidad de ejecución remota de código en el...

CVE-2021-38304-PoC

CVE-2021-38304 Prueba de Concepto Resumen Este repositorio contiene una prueba de concepto para una vulnerabilidad de seguridad crítica en versiones antiguas del controlador nipalk.sys de National Instruments. La vulnerabilidad permite la ejecución arbitraria de código y la divulgación de memoria...

EUVD-2026-59659

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read possibility The domain value is extracted from a given CCA or EP11 ioctl struct when a CPRB is about to be sent. Thus this is a user controlled value. Under some special conditions custom...

CVE-2026-72091 accel/amdxdna: reject user command submission without a command BO

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

CVE-2026-68179

In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...

CVE-2026-15449 TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption

A time-of-check to time-of-use TOCTOU flaw in the illumos data-link pseudo-driver dld affects handling of the DLDIOCGETMACPROP and DLDIOCSETMACPROP ioctls on /dev/dld. drviocpropcommon in usr/src/uts/common/io/dld/dlddrv.c copies the dldiocmacpropt ioctl header in once to read its prvalsize field...

CVE-2026-25266

Memory corruption while processing IOCTL command when device is in power-save state...

PT-2026-52265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ethosu component where the driver does not implement the NPU OP RESIZE command, which is specific to U85. When a user submits this command via the DRM IOCTL...

CVE-2025-59610

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer...

CVE-2025-53966

An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow during handling of an IOCTL message...

CVE-2025-53966

The CVE-2025-53966 issue affects Samsung Mobile Processor Exynos 1380, 1480, 2400, and 1580. It is caused by incorrect handling of NL80211 vendor commands, leading to a buffer overflow during IOCTL message processing. Publicly available details in the connected documents confirm the affected SKUs...

CVE-2025-47387

Memory Corruption when processing IOCTLs for JPEG data without verification...

CVE-2025-40117

In the Linux kernel, the following vulnerability has been resolved: misc: pciendpointtest: Fix array underflow in pciendpointtestioctl Commit eefb83790a0d "misc: pciendpointtest: Add doorbell test case" added NOBAR -1 to the pcibarno enum which, in practical terms, changes the enum from an unsign...

CVE-2025-27048 Untrusted Pointer Dereference in Camera

Memory corruption while processing camera platform driver IOCTL calls...

EUVD-2007-2169

Malware in sbrugna...

EUVD-2019-1815

Malware in sbrugna...

EUVD-2016-5307

Malware in sbrugna...

EUVD-2019-8829

Malware in sbrugna...

EUVD-2021-8957

Malicious code in bioql PyPI...

CVE-2019-1010066

Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in orde...