Lucene search
+L

29 matches found

Kitploit
Kitploit
•added 2026/10/26 9:01 p.m.•29 views

asus-bsitf-0-day-poc

POC - ASUS bsitf.sys Kernel Memory Mapping to Usermode CVE-2026-13585 Summary The ASUS bsitf.sys also distributed as AsusBSItf.sys kernel driver exposes IOCTL 0x222808 which allocates physically contiguous kernel memory of attacker-controlled size, maps it into the calling process's address space...

8.2CVSS8.2AI score0.00163EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/12 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-68260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vmctx-lock before mapping memory to GPU VM The drm gpuvm code doesn...

7.8CVSS5.9AI score0.00163EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/27 12:00 a.m.•16 views

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39845)

In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernelmappings Define ARCHPAGETABLESYNCMASK and archsynckernelmappings to ensure page tables are properly synchronized when calling pdpopulatekernel. For 5-level paging,...

5.5CVSS6.1AI score0.00157EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/19 12:02 p.m.•64 views

CVE-2026-63807

CVE-2026-63807 concerns the Linux kernel KVM: x86/mmu path. The issue arises when recovering hugepages in the shadow MMU, where the base guest frame number (gfn) of a shadow page must be verified to be within the target memslot before querying the max mapping level. If the gfn is not pre-checked,...

8.8CVSS6.1AI score0.00173EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
•added 2025/10/22 1:23 p.m.•38 views

CVE-2023-53699 riscv: move memblock_allow_resize() after linear mapping is ready

In the Linux kernel, the following vulnerability has been resolved: riscv: move memblockallowresize after linear mapping is ready The initial memblock metadata is accessed from kernel image mapping. The regions arrays need to "reallocated" from memblock and accessed through linear mapping to cove...

0.00214EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2022-25498

Malicious code in bioql PyPI...

10CVSS8.6AI score0.0056EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-25499

Malicious code in bioql PyPI...

9.8CVSS8.6AI score0.00299EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2025/06/05 12:00 a.m.•12 views

VulnCheck KEV: CVE-2025-0285

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits...

7.8CVSS7.5AI score0.00336EPSS
SaveIn wildExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 3:33 p.m.•19 views

CVE-2020-3613

Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0
NVD
NVD
•added 2025/03/03 5:15 p.m.•25 views

CVE-2025-0285

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits...

7.8CVSS0.00336EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/03/03 5:15 p.m.•21 views

CVE-2025-0285

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits...

7.8CVSS7.5AI score0.00336EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/03 4:25 p.m.•124 views

CVE-2025-0285

Various Paragon Software products are vulnerable to an arbitrary kernel memory mapping vulnerability within the biontdrv.sys driver. The root cause is a failure to properly validate the length of user-supplied data, which can lead to out-of-bounds memory operations. An attacker can exploit this f...

7.8CVSS7.5AI score0.00336EPSS
SaveIn wildExploits0References3Affected Software6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•13 views

CVE-2025-0285: Improper Validation of Specified Quantity in Input

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits...

7.8CVSS7.5AI score0.00336EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/03/03 12:00 a.m.•24 views

CVE-2025-0289

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service. Recent assessments: Assessed...

7.8CVSS7.4AI score0.00336EPSS
SaveIn wildExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/28 12:00 a.m.•26 views

PT-2025-9247 · Paragon · Paragon Partition Manager

Name of the Vulnerable Software and Affected Versions: Paragon Partition Manager version 7.9.1 Description: The issue is caused by a failure to properly validate the length of user-supplied data, leading to an arbitrary kernel memory mapping vulnerability within the biontdrv.sys component. This c...

7.8CVSS7.5AI score0.00336EPSS
SaveExploits0References15
Vulnrichment
Vulnrichment
•added 2022/08/09 8:20 p.m.•5 views

CVE-2022-20239

remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

8.9AI score0.00299EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/13 7:15 p.m.•13 views

CVE-2022-20238

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

10CVSS7.2AI score0.0056EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/13 7:15 p.m.•40 views

CVE-2022-20238

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

10CVSS0.0056EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2022/07/01 12:00 a.m.•33 views

ASB-A-233154555

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploited...

10CVSS8.2AI score0.0056EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/22 7:15 a.m.•33 views

Double free

Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150...

7.2CVSS7.6AI score0.00238EPSS
SaveExploits0References2
Rows per page
Query Builder