CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys versione 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2022-26937

PoC di crash di Windows Network File System CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical...

CVE-2026-80661

In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structure as an argument for the tracepoint and then in TPprintk the printing...

CVE-2026-80636

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid infrastructure This infrastructure is not used anymore after moving ct timeout and helper to use datapath refcount to track object use. Revert commit c56716c69ce1 "netfilter:...

CVE-2026-80631

In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment that overflows the compressed input lzodecompressbio validates each on-disk segment length seglen only against the workspace cbuf size, not against the compressed input size compressedlen, th...

CVE-2026-80617

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foechecktime allocation size foechecktime is declared as u16 pointer but was allocated with only ppenumentries bytes instead of ppenumentries sizeofu16. When airohappefoeverifyentry is called with hash =...

CVE-2018-4407

CVE-2018-4407 Crash del kernel causato da una scrittura fuori dai limiti nel codice di gestione dei pacchetti ICMP di Apple CVE-2018-4407 per iOS 11.0, 11.2, 11.3.1...

CVE-2018-4407

CVE-2018-4407 Crash del kernel IOS/macOS Utilizzo: python CVE20184407.py IP/CIDR python CVE-20184407.py 192.168.1.1 python CVE-20184407.py 192.168.1.0/24 1. trova iPhone nmap -sS -p 62078 --open 192.168.1.0/24 2. attacca python CVE20184407.py iphoneip...

CVE-2026-80694

CVE-2026-80694 affects the Linux kernel's mtk_eth_soc Ethernet driver. The root cause is a type mismatch: mtk_poll_controller passed a net_device * to mtk_handle_irq_rx, which expects a struct mtk_eth * (the request_irq cookie). When ndo_poll_controller is invoked with CONFIG_NET_POLL_CONTROLLER ...

CVE-2026-80661

CVE-2026-80661 is a use-after-free vulnerability in the Linux kernel's UFS trace events (drivers/ufs/core/ufs_trace.h). The tracepoints passed a pointer to the hba structure to TP_printk(), which dereferenced it to print the device name. Because TP_printk() executes only when the trace event is r...

EUVD-2026-67537

In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structure as an argument for the tracepoint and then in TPprintk the printing...

CVE-2026-80651

CVE-2026-80651 is a NULL pointer dereference in the Linux kernel's drivers/crypto/ccp/sev-dev-tsm.c , specifically in the dsm_create() function. The function checks whether pdev->bus is NULL when computing segment_id, but immediately afterward unconditionally dereferences pdev->bus via pcie...

CVE-2026-80644

CVE-2026-80644 affects the OCFS2 filesystem in the Linux kernel. A commit (10995aa2451a) replaced a -EIO return in ocfs2_journal_toggle_dirty() with a BUG_ON(), assuming the journal dinode was already validated. A fuzzed OCFS2 image can corrupt the current slot journal dinode while mount is in pr...

CVE-2026-80617

CVE-2026-80617 affects the Linux kernel's airoha network driver . The vulnerability is a heap buffer overflow in foe_check_time, which is declared as a u16 pointer but was allocated with only ppe_num_entries bytes instead of ppe_num_entries * sizeof(u16). When airoha_ppe_foe_verify_entry() is cal...

CVE-2022-21907-http.sys

CVE-2022-21907 - Double Free nel driver http.sys CVE-2022-21907 - Double Free nel driver http.sys Sommario Un attaccante non autenticato può inviare una richiesta HTTP con un header di richiesta HTTP "Accept-Encoding" che innesca un double free nella lista di codifiche sconosciuta all'interno del...

check_icmp_dos-CVE-2018-4407-

Prinzip Das Prinzip besteht darin, andere Felder des „icmp“-Pakets ungültig zu machen. Da der macOS- oder iPhone-Kernel bei der Analyse keine Größenprüfung implementiert hat, kommt es zu einem Crash. Geräte 1. Apple iOS 11 und früher: alle Geräte 2. Apple macOS High Sierra höchste betroffene...

CVE-2022-26937

Crash PoC del File System di Rete Windows CVE-2022-26937 root@kitploit: nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical dat...

CVE-2026-80528

A flaw was found in the Linux kernel's Ceph filesystem. When the kernel handles replies and fills inode and dentry caches, a memory allocation can trigger a memory reclamation process. This process can incorrectly interpret Ceph-specific data as a journal handle if it interacts with another...

CVE-2026-74750

A flaw was found in the Linux kernel's ovpn module. This vulnerability arises from an incorrect handling of cryptographic resource freeing, where a function that requires the ability to pause sleep is executed in a context that does not allow it. This improper resource management could lead to...

CVE-2021-30955-POC

CVE-2021-30955 POC Prova di concetto confezionata in un'app iOS per CVE-2021-30955 Tutto il merito va a Jake James. Il suo codice POC usato in questo progetto può essere trovato qui. Cos'è? Questo dimostra CVE-2021-30955, un bug iOS che consente a un'app nello spazio utente di ottenere permessi a...