libget_user_exploit

这个库利用CVE-2013-6282漏洞读取内核内存。...

libmsm_vfe_read_exploit

Leer memoria del kernel con CVE-2014-4321...

CVE-2020-1206-POC

CVE-2020-1206 未初始化内核内存读取 POC c 2020 ZecOps, Inc. - https://www.zecops.com - 寻找攻击者的错误 用于检查 CVE-2020-1206 / "SMBleed" 的POC 预期结果：包含目标计算机内核内存的本地文件。 仅用于教育和企业环境测试。 ZecOps 不对代码承担任何责任，使用风险自负。 如果您对用于服务器、终端和移动设备的无代理 DFIR 工具感兴趣，请通过 [email protected] 联系我们，这些工具能够自动检测 SMBleed 及其他类型的攻击。 用法 SMBleed.exe...

CVE-2025-65264

CVE-2025-65264 描述 在 CPU‑Z 2.17 及更早版本（以及其他使用 CPU-Z 驱动程序 1.0.6.1 及更早版本的产品）中，驱动程序（例如 cpuz161.sys）从用户提供的地址解引用一个值，并将其写入调用者提供的系统缓冲区。攻击者可以通过在输入缓冲区中提供目标地址，通过 IOCTL 读取任意内核内存。 PoC 这是一个简单的 PoC，用于读取 System 进程的令牌。 影响 这可能导致信息泄露。它还可以与存在任意内核写入漏洞的驱动程序结合，实现内核代码执行。 示例输出 免责声明...

CVE-2026-14960-CVE-2026-14961

Pegatron TdeIo64 驱动程序（tdeio64.sys）中的权限提升漏洞 | ---|--- CVE 编号| CVE-2026-14960, CVE-2026-14961 厂商| Pegatron Corporation 产品| TdeIo 驱动程序（tdeio64.sys） 设备接口| \.\TdeIo 漏洞类型| 不当的访问控制（CWE-284）、任意内核内存读/写（CWE-787/CWE-125）、未受保护的 I/O 端口访问 影响| 权限提升至 SYSTEM、硬件级入侵 攻击向量| 本地 所需权限| 低（任何本地用户） 测试平台| Windows 10/11 x64...

CVE-2025-67246

CVE-2025-67246 漏洞标题 ：鲁大师不正确的访问控制 受影响版本 ：低于6.1026.4505.112 发现时间 ：2025年12月2日 发现者 ：周瑞 分析报告 ： 鲁大师是一款知名的免费系统实用软件，提供免费的硬件检测、电脑（手机）稳定性保障和系统性能提升。鲁大师及其附属系统产品（电脑性能优化、系统性能监控）中的 ComputerZx64.sys 驱动程序包含可读取低4GB内核地址的数据。...

CVE-2026-84572

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65359

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination o...

CVE-2026-43690

A race condition exists in macOS that can allow a local user to read kernel memory . This vulnerability was addressed by implementing improved locking and is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . Exploitation details and specific in-the-wild evidence are not ...

EUVD-2026-78125

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory...

CVE-2026-65415

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory...

EUVD-2026-77920

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65359

An out-of-bounds read vulnerability exists in several Apple products, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The root cause was addressed through improved bounds checking. A local user may be able to exploit this issue to cause unexpected system termination or read kerne...

CVE-2026-65359

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination o...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel up to version 6.3.1, a use-after-free issue in Netfilter’s nftables module arises when processing batch requests. This allows unprivileged local users to obtain root privileges. The issue occurs due to improper handling of anonymous sets...

Astra Linux – Vulnerability in Linux, Linux 5.10

A vulnerability was discovered in the drivers/usb/gadget/function/rndis.c file within the Linux kernel before version 5.16.10. The RNDIS USB gadget does not include validation for the size of the RNDISMSGSET command. Attackers can obtain sensitive information from the kernel memory...

CVE-2026-65415: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory...

PT-2026-91562

Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description A race condition occurs due to insufficient validation...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053278 advisory. In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntlsetlk races with clos...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098785 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master conntrac...