CVE-2015-8710

Riproduttore Un ringraziamento a Mike Dalessio, Francois Chagnon, Florian Weingarten e Jun Kokatsu. Vedi BZ 746048 Compilazione su Linux root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2...

portia

⚠️ NOTA: Questo strumento non è più in manutenzione attiva. portia Portia mira ad automatizzare una serie di tecniche comunemente eseguite durante i test di penetrazione di reti interne dopo che un account con privilegi limitati è stato compromesso Privilege escalation Movimento laterale Moduli di...

BasicHook

BasicHook Fängt Funktionen mittels 32-Bit-Relativsprung ab, das Schreiben erfolgt atomar, um Wettlaufbedingungen zu vermeiden. Verwendet hde32 aus der Disassemblierung der Befehlslänge...

zyrox

Ofuscador LLVM Zyrox plugin de compilação e link-time do LLVM para ofuscar código nativo Porquê por que não ¯\ツ/¯ Um dos meus maiores projetos, onde aprendi muito sobre os internos do LLVM, formatos binários, assembly e técnicas de ofuscação. Acredito que aprender construindo é a melhor forma de...

CVE-2024-44083

CVE-2024-44083 मूल PoC रिपॉजिटरी हटा दी गई थी github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme तो यहाँ इसे फिर से बनाया गया है। मैंने सोचा कि इसे दोबारा बना दूँ ताकि जो कोई यह समझना चाहे कि यह कैसे काम करता है या अपने सेटअप का परीक्षण करना चाहता है, उसके लिए उपलब्ध हो। IDA Pro ≤ 8....

Byepervisor

Byepervisor Riepilogo Exploit dell'hypervisor per PS5 per firmware = 2.xx. Nel repository sono contenute due vulnerabilità e relative catene di exploit, indipendenti tra loro; è possibile usarne una qualsiasi. Un exploit è fornito principalmente per preservazione /oldjumptableexploit, serve solo ...

Astra Linux – Vulnerability in Linux 5.15, Linux

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: The jump labels are called before parseearlyparam is executed. On 64-bit systems, calling jumplabelinit within setupfeaturekeys is too late because static keys may be used in subroutines of parseearlyparam, which in...

Jump-over-ASLR-BTB

Branch-Prädiktoren & ASLR Autor: Byte Reaper Beschreibung Dieses Repository enthält eine C-Implementierung für Forschungszwecke, die Konzepte im Zusammenhang mit Branch-Prädiktoren, spekulativer Ausführung und Cache-basierten Seitenkanälen im Kontext der Address-Space-Layout-Randomization ASLR...

cfgrip

cfgrip PE/ELF x86/x64 CFG-Extraktor. Nimmt eine Binärdatei entgegen, zerlegt sie, löst jeden Sprung und Aufruf auf GOT, Sprungtabellen, Registerverfolgung und exportiert den vollständigen Kontrollflussgraphen als strukturiertes JSON. warum Du musst genau wissen, wohin jeder Zweig führt. Nicht zum...

CVE-2026-72154

A flaw was found in the Linux kernel, specifically within the OpenRISC architecture's handling of jump label synchronization in Symmetric Multiprocessing SMP systems. The implementation did not correctly invalidate instruction caches icaches on remote processor cores after updates. This oversight...

Linux Distros Unpatched Vulnerability : CVE-2026-72154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d openrisc: Add jump label support copies from arm64 and does not properly consider how icach...

CVE-2026-72154 openrisc: Fix jump_label smp syncing

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jumplabel smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remot...

PT-2026-72342

In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump label smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remo...

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

EUVD-2026-55286

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...

CVE-2026-68185

CVE-2026-68185 (LoongArch, Linux kernel): A boot-time failure occurs when CONFIG_MEM_ALLOC_PROFILING=y and CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y because jump_label_init() is invoked after parse_early_param(), allowing early-param handlers to modify static keys. The fix moves jump_label_...

MINI-JMP6-87WH-58P5

Bulletin has no description...

CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

ALPINE-CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

CVE-2025-58151

CVE-2025-58151 affects varstored, a Xen/Xapi component that handles UEFI variables and maps guest memory to OVMF. The vulnerability arises from TOCTOU due to insufficient compiler barriers in the shared buffer, with exploitation depending on compiler-generated code, and the attacker potentially c...