cve-2026-43499-m3q-azf1

GhostLock SELinux park — SM-S948U1 / AZF1 m3q Research snapshot of a working SELinux-only park for Samsung Galaxy S26 Ultra SM-S948U1, codename m3q on firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough...

cve-2026-43499

GhostLock Exploitation Failure Summary on PD2229 SM8475, 5.10.233 GKI I. Vulnerability and Device Facts 1.1 CVE-2026-43499 GhostLock Basic Information Item| Value ---|--- Vulnerability Type| Stack Use-After-Free in the rtmutex / futex PI path Introduced Version| Linux 2.6.39-rc1 May 2011, commit...

exploiting-cve-2017-5123

Sfruttare CVE-2017-5123 Introduzione Questo repository è un'aggiunta all'articolo pubblicato su MISC Magazine 96. Siamo riusciti ad elevare i nostri privilegi in modo affidabile, sulla nostra macchina virtuale con SMEP/SMAP e KASLR abilitati. Va comunque notato che il sistema viene lasciato in un...

prefetch-tool

Strumento Prefetch KASLR per Windows Uno strumento proof-of-concept per bypassare KASLR ASLR del kernel su Windows 11. Ispirato da EntryBleed per Linux. Questo strumento è stato sviluppato come parte di un exploit che ha come target Windows 11 24H2. Non sono affatto un esperto di canali laterali,...

Lenovo-CVE-2025-8061

CVE-2025-8061 è una vulnerabilità di escalation dei privilegi nel driver LnvMSRIO.sys di Lenovo. Il driver espone gestori IOCTL che consentono a qualsiasi processo in modalità utente inclusi utenti non privilegiati di: Leggere/scrivere Registri Specifici del Modello MSR arbitrari Leggere/scrivere...

vpwn

vpwn von qwertyoruiop Generische xnu Heap-Overflow-Exploitation. Demo-Ausgabe: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local...

CVE-2019-1215

CVE-20190-1215 ws2ifsl.sys UAF-Exploit für Windows 10 19H1 x64 Dieser Exploit verwendet die kürzlich gepatchte Use-After-Free-Schwachstelle CVE-2019-1215 in ws2ifsl.sys, um eine lokale Privilegienausweitung zu erreichen. Der Exploit zielt auf Windows 10 19H1 1901 x64 ab und zeigt, wie kASLR, kCFG...

CVE-2025-50168-pwn2own-berlin-2025

Autore: D4m0n CVE-2025-50168 Questo è un exploit presentato a Pwn2Own Berlin 2025 - Categoria LPE. La vulnerabilità si verifica in Win32kbase!DirectComposition e ulteriori dettagli sono disponibili nel post del blog. Riconoscimenti Tecnica di bypass di kASLR: prefetch-tool di carrotc4k3...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept che dimostra una vulnerabilità di divulgazione di informazioni in Microsoft Desktop Window Manager dwm.exe. Panoramica Questo repository contiene un Proof of Concept PoC personalizzato sviluppato per riprodurre CVE-2026-20805, una vulnerabilità di divulgazione ...

CVE-2026-40369

هذه إعادة صياغة وملخص للتحليل الفني العام الذي نشره VoidSec حول CVE-2026-40369، مع إضافة مخطط انسيابي وملاحظات دفاعية لفهمي الشخصي. جميع التفاصيل التقنية الأساسية مأخوذة من بحثه. لم أجري هندسة عكسية مستقلة على هذا الخطأ البرمجي. CVE-2026-40369: تحليل دفاعي لبدائية الزيادة ذات الـ12 بايت في نواة...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / Die Offsets können abweichen, der Kernel wurde individuell kompiliert. Beim Testen kannst du vmlinux lesen und den Offset berechnen. / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define...

kernel-exploits

Linux kernel exploits दिनांक| लिंक| विवरण| वेक्टर| प्रभाव ---|---|---|---|--- 02.2016| CVE-2016-2384| USB MIDI ड्राइवर में डबल-फ्री| USB + लोकल| LPE 03.2016| prefetch-side-channel| prefetch के माध्यम से KASLR बायपास| लोकल| जानकारी-लीक 12.2016| CVE-2016-9793| सॉकेट बफ़र्स के साथ साइन्डनेस समस्या|...

CVE-2026-43499-NAM-AL00

CVE-2026-43499 — GhostLock auf Huawei Nova 9 NAM-AL00 Sicherheitsforschung: Bestätigung auf dem Gerät und Exploit-Analyse von CVE-2026-43499 GhostLock auf Huawei Nova 9 NAM-AL00, Snapdragon 778G/SM7325, HarmonyOS 4.2.0.185, Kernel 5.4.86-qgki. Zusammenfassung CVE-2026-43499 ist ein...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Suite di Rilevamento Hypervisor per Honor Magic V2 ➲ Panoramica del Progetto SENTINEL-ROOT-AUDIT è una suite di sicurezza di livello professionale progettata per verificare l'integrità del kernel e rilevare interventi a livello hypervisor su Honor Magic V2 SM8550. Mentre la...

exploit_linux_kernel4.13

Questo repository contiene un vecchio poc che combina tre CVE CVE-2017-14954, CVE-2017-18344, CVE-2017-5123. Il poc è un'Elevazione locale dei privilegi per Linux Kernel 4.13 testato su Ubuntu. L'exploit utilizza una fuga di informazioni CVE-2017-14954 per bypassare KASLR, una lettura arbitraria...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 vivo PD2425 Exploit Adaptation Project A porti...

Exploit for CVE-2026-50416

CVE-2026-50416: a kernel pointer on every desktop, readable fr...

UBUNTU-CVE-2026-52937

In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tapioctl SIOCGIFHWADDR In the SIOCGIFHWADDR path, tapioctl copies 16 bytes of an uninitialised on-stack struct sockaddrstorage to userspace via ifrhwaddr, but netifgetmacaddress only writes safamily an...

📄 Qualcomm CVP Kernel Pointer Leak

The Qualcomm CVP driver exposes kernel pointers to userland by returning a hashed session ID derived from a kernel pointer using hash32ptr. This function is not a cryptographic hash but a reversible fold that XORs the upper and lower 32 bits of the pointer. Due to predictable ARM64 kernel virtual...

CVE-2026-23763

VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a local privilege escalation vulnerability in the VBMatrix VAIO virtual audio driver vbmatrixvaio64win10.sys. The driver allocates a 128-byte non-paged pool buffer and, upon receiving IOCT...