CVE-2026-23789

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dmabuf references...

CVE-2026-23789

An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000. A double-free vulnerability in the Exynos MFC encoder driver due to improper cleanup of dmabuf references...

CVE-2026-23789

CVE-2026-23789 is a double-free vulnerability in the Exynos MFC encoder driver across Samsung Mobile and Wearable Processors (Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, W1000). The root cause is improper cleanup of dma_buf references during err...

CVE-2022-20186

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

vpwn

vpwn 由 qwertyoruiop 编写 通用 xnu 堆溢出利用。 演示输出: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local 14.3.0 Darwin Kernel Version 14.3.0...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

CVE-2026-64747

CVE-2026-64747 — Controlador de kernel AppleAVE2: formato de cable + PoC de alcanzabilidad Análisis de causa raíz y prueba de concepto de alcanzabilidad para macOS de CVE-2026-64747, un desbordamiento de búfer en la extensión de kernel del codificador de video AppleAVE2 com.apple.driver.AppleAVE2...

Intel-CVE-2015-2291

Intel-CVE-2015-2291 PoC exploit for CVE-2015-2291 Data-only attack to pop a system shell with the vulnerable intel driver. The code itselfs implements more "functionality" provided from the driver, like physical to virtual address translation, mapping physical memory This two combined = arbitrary...

NotSecDrv

NotSecDrv - A PoC code for CVE-2018-7249 General Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race...

CVE-2020-15368

如何利用一个存在漏洞的Windows驱动程序 针对 CVE-2020-15368 的漏洞利用与概念验证（PoC）。Asrock 将 rweverything 驱动程序重新打包，用于其 RGB 控制器配置工具，并对其进行了签名。他们通过加密 ioctl 来“保护”这个驱动……呵呵。去年夏天我们偶然发现了这个 CVE，据我所知，该驱动程序至今仍未得到修补。其影响自然是内核中的任意代码执行等。那么，请享用这个“0day”吧，哈哈。 如果你想和我争论这是否是一个真正的、可靠的 CVE，请随时在 Twitter...

CVE-2015-2291

CVE-2015-2291 1 版本低于 1.3.1.0 的 IQVW32.sys 和 2 版本低于 1.3.1.0 的 IQVW64.sys（位于 Windows 版 Intel 以太网诊断驱动程序中）允许本地用户通过特制的 a 0x80862013、b 0x8086200B、c 0x8086200F 或 d 0x80862007 IOCTL 调用导致拒绝服务，或可能以内核权限执行任意代码。 概述 本仓库包含针对该漏洞的分析文章，以及可在 64 位 Windows 7 SP1 和 Windows 10 20H2 上运行的概念验证（PoC）漏洞利用代码。驱动程序文件位于 Driver...

lenovo_exec

lenovoexec CVE-2022-3699 具备任意内核代码执行能力 原始漏洞利用代码：https://github.com/alfarom256/CVE-2022-3699...

AZL-100697 CVE-2026-89489 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the "or1k" ABI takes two user pointers, v1 and v2, and swaps the words they point to in hand-written assembly. l.lwz r29,0r4 l.lwz...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel Exploit Resumen En este proyecto encontrarás una implementación completa del segundo exploit de kernel "bpf" para PlayStation 4 en la versión 5.05. Te permitirá ejecutar código arbitrario como kernel, para permitir el jailbreak y modificaciones a nivel de kernel en el sistema. Est...

CVE-2025-66678

CVE-2025-66678 在 Hardware Read & Write Utility v1.25.11.26 中，驱动程序通过 MmMapIoSpace 暴露了任意的 MSR 读写以及物理内存读写，两者均可实现内核代码执行。 PoC 详情 该 PoC 将通过交换当前进程的主令牌，使其成为 NT Authority\SYSTEM。 使用方法 1. 将易受攻击的驱动程序放置在 C:\Users\Public 目录下 2. 以管理员身份运行漏洞利用程序 注意：本项目中不会共享该易受攻击的驱动程序。 示例输出 读写 MSR 读写物理内存 免责声明...

CVE-2023-6241

Exploit para CVE-2023-6241 El análisis completo se puede encontrar aquí. Este es un error en el controlador del kernel Arm Mali que reporté en noviembre de 2023. El error puede utilizarse para obtener ejecución arbitraria de código en el kernel desde el dominio de aplicaciones no confiables, que...

CVE_2022_46395_Raven

Exploit para CVE-2022-46395 para ejecutar en FireTV 2nd gen Cube Este es un fork del Pixel 6 POC para CVE-2022-46395 del investigador de seguridad Man Yue Mo. Lee su análisis detallado de la vulnerabilidad aquí. Se han realizado cambios para tener en cuenta el espacio de usuario de 32 bits de...

CVE-2021-38304-PoC

CVE-2021-38304 Prueba de Concepto Resumen Este repositorio contiene una prueba de concepto para una vulnerabilidad de seguridad crítica en versiones antiguas del controlador nipalk.sys de National Instruments. La vulnerabilidad permite la ejecución arbitraria de código y la divulgación de memoria...

CVE-2020-11179-Adreno-Qualcomm-GPU

Mi trabajo independiente a partir del poc creado por el investigador de P0 Ben Hawkes Artículo original: https://googleprojectzero.blogspot.com/2020/09/attacking-qualcomm-adreno-gpu.html Mi objetivo es convertir su poc a C, y continuar desde donde él lo dejó y convertir el poc en una shell root, ...