asus-bsitf-0-day-poc

POC - ASUS bsitf.sys Kernel Memory Mapping to Usermode CVE-2026-13585 Summary The ASUS bsitf.sys also distributed as AsusBSItf.sys kernel driver exposes IOCTL 0x222808 which allocates physically contiguous kernel memory of attacker-controlled size, maps it into the calling process's address space...

kur

kur A code simply offers the ability to kernel-mode read / write memory from user-mode using vulnerable signed driver. It's simply utilizing MmCopyVirtualMemory, which is undocumented yet one of the most common API, in kernel mode so you can read / write any user-mode memory without having to wor...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow en Apple iOS/iPadOS root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ SEVERIDAD: CRÍTICA │ CVSS: 9.8 │ CWE-120 │ REMOTO ║ ╚══════════════════════════════════════════════════════════════╝ Un usuario remoto puede provocar la...

libmsm_vfe_read_exploit

CVE-2014-4321 के साथ कर्नेल मेमोरी पढ़ें...

cve-2024-1086-lpe

cve-2024-1086-lpe CVE-2024-1086 का तकनीकी विश्लेषण और प्रूफ-ऑफ-कॉन्सेप्ट, जो Linux कर्नेल nftables उपयोग-पश्चात-मुक्त use-after-free भेद्यता है और स्थानीय विशेषाधिकार वृद्धि local privilege escalation की ओर ले जाती है। इसमें भेद्यता का विवरण, प्रभावित संस्करण, शोषण पद्धति, और शोध एवं शैक्षिक...

swapgs-attack-poc

PoC for the SWAPGS attack CVE-2019-1125 This repository holds the sources for the SWAPGS attack PoC publicly shown at Black Hat USA, 2019. Contents leakgsbkva - variant 1 look for random values in kernel memory; limited to PE kernel image header leakgsbkvat - variant 2 extract random values from...

CVE-2019-2215

CVE-2019-2215 Temproot pour téléviseur Bravia via CVE-2019-2215. Aperçu Démonstration d'une attaque d'escalade de privilèges par lecture/écriture seule de la mémoire du noyau aboutissant à un shell root temporaire. Fonctionne sur les téléviseurs Sony Bravia fonctionnant sous le firmware Android 8...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md : Cadre d'exploitation de la vulnérabilité RFCOMM Bluetooth « Heartbleed » CVE‑2025‑13834 Auteur : Sastra Adi Wiguna Purple Elite Teaming Date : 20 janvier 2026 Version : 1.0 Réplication complète du système Licence :...

Imperius

Imperius Haz visible nuevamente un rootkit LKM. Implica obtener la dirección de la función "moduleshow" de un rootkit, por ejemplo el rootkit diamorphine, y utilizarla para llamarla, añadiéndola de nuevo a lsmod, haciendo posible eliminar un rootkit LKM. Podemos obtener la dirección de la función...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Leitura/Escrita Não Autenticada de Memória do Kernel via ioctls de Debug CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Descobridor : Daniil Gordeev Divulgado : 2026-05-03 Resumo O driver de kernel Wi-Fi rtl8192cd no "Jungle SDK" fora da árvore d...

CVE-2024-49138-POC

CVE-2024-49138-POC डीकंबाइन त्रुटि ठीक करें root@kitploit: C:\Program Files\Microsoft Visual Studio\2022\Professional\MSBuild\Microsoft\VC\v170\Microsoft.CppBuild.targets456,5: error MSB8020: The build tools for Visual Studio 2019 Platform Toolset = 'v142' cannot be found. To build using the v142...

CVE-2026-14960-CVE-2026-14961

ثغرات تصعيد الامتيازات في برنامج تشغيل Pegatron TdeIo64 tdeio64.sys | ---|--- معرفات CVE| CVE-2026-14960, CVE-2026-14961 البائع| Pegatron Corporation المنتج| برنامج تشغيل TdeIo tdeio64.sys واجهة الجهاز| \.\TdeIo أنواع الثغرات| التحكم غير السليم في الوصول CWE-284، قراءة/كتابة عشوائية لذاكرة النواة...

CVE-2017-5123

README ملاحظة : الكود الموجود في هذا المستودع مخصص لعرض عزل تقنيات حاويات الرمل الآمنة مثل kata containers ولا يقصد مهاجمة أي منصات. كيفية إعادة الإنتاج احصل على نواة لينكس 4.13.0 طبّق الرقعة 0001-CVE-2017-5123-help-to-make-attack-safely.patch ابنِ نواة لينكس باستخدام الإعداد Kconfig أقلع النواة...

CVE-2025-8061-Exploit

Exploit CVE-2025-8061 Visão Geral Exploit de Prova de Conceito para LnvMSRIO.sys Driver MSR I/O da Lenovo, demonstrando leitura/escrita arbitrária de memória física e acesso à memória do kernel através da tradução VA-para-PA do Superfetch. Informações do Driver Propriedade| Valor ---|--- Nome do...

CVE-2017-5123

CVE-2017-5123 Escalade de privilèges sous Linux exploitant l'appel système waitid. Cet exploit vous est présenté par @XeR0x2A et @chaignc de HexpressoTeam à des fins éducatives uniquement. Le bogue a été introduit le 2017-05-21 et corrigé le 2017-10-09 ; 4.14.0-rc4+ est connu comme vulnérable...

CVE-2025-65264

CVE-2025-65264 Descrizione In CPU‑Z 2.17 e versioni precedenti e altri prodotti che utilizzano il driver CPU-Z con versione 1.0.6.1 e precedenti, il driver ad esempio cpuz161.sys dereferenziava un valore da un indirizzo fornito dall'utente e lo scriveva nel buffer di sistema fornito dal chiamante...

CVE-2025-67246

CVE-2025-67246 शीर्षक : लुडाशी में अनुचित पहुँच नियंत्रण प्रभावित संस्करण : 6.1026.4505.112 से पहले खोज तिथि : 2 दिसंबर, 2025 खोजकर्ता : झोउरुई विश्लेषण रिपोर्ट : लुडाशी एक प्रसिद्ध मुफ्त सिस्टम उपयोगिता सॉफ्टवेयर है जो मुफ्त हार्डवेयर प्रमाणीकरण, कंप्यूटर मोबाइल फोन स्थिरता आश्वासन और सिस्टम...

NovaHypervisor

NovaHypervisor Descrizione NovaHypervisor è un hypervisor difensivo basato su host Intel x64. L'obiettivo di questo progetto è proteggere da attacchi a livello kernel tramite Bring Your Own Vulnerable Driver BYOVD o altri mezzi salvaguardando i prodotti di difesa Antivirus / Protezione endpoint e...

mquire

mquire mquire, un gioco di parole tra memory e inquire, è uno strumento di interrogazione della memoria ispirato a osquery. Vantaggio principale: nessun simbolo di debug esterno necessario mquire può analizzare snapshot della memoria del kernel Linux senza richiedere simboli di debug esterni. Tut...

CVE-2020-8835

CVE-2020-8835 root@kitploit: In the Linux kernel 5.5.0 and newer, the bpf verifier kernel/bpf/verifier.c does not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. This vulnerability also affects the Linux 5.4 stable series,...