cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Dieses Programm ist ein Exploit für cve-2018-8453. Die Schwachstelle selbst existiert in Windows 7 und späteren Versionen. Beachten Sie jedoch: Sie kann nur unter Windows 8.1 und späteren Versionen ausgenutzt werden! Daher ist dieser EXP nur für Windows 8.1 und...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 PoC di Escalation dei Privilegi Locali Panoramica Questo progetto è un proof-of-concept didattico per una vulnerabilità di Escalation dei Privilegi Locali LPE nel driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9...

CVE-2021-1961

Exploit-Code für CVE-2021-1961. Der vollständige Beitrag ist auf meinem Blog verfügbar. Um den Exploit zu bauen, führen Sie ndk-build des Android NDK aus. Um den Exploit auszuführen, benötigen Sie Zugriff auf /dev/qseecom, was bedeutet, dass Sie die richtige Benutzer-/Gruppenkombination und den...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Questo programma è un exploit per cve-2018-8453. Piattaforma di sviluppo\test: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utilizza Palette per leggere/scrivere il kernel Avvertenza importante: questo strumento è destinato esclusivamente alla ricer...

oob_entry

oobentry: Pesquisa autorizada de exploração do kernel iOS para acesso tfp0 Visite os lançamentos: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip Um espaço tranquilo e criterioso para pesquisadores documentarem, discutirem e compartilharem conhecimento sobre...

cve-2019-2215

CVE-2019-2215 Temproot per Pixel 2 e Pixel 2 XL tramite CVE-2019-2215 Basato su un proof-of-concept di Jann Horn e Maddie Stone di Google Project Zero Panoramica Dimostrazione di un attacco di escalation dei privilegi che utilizza solo lettura/scrittura della memoria del kernel, che si conclude c...

kfd

Aviso rápido: não tenho a intenção de adicionar offsets para outros dispositivos e versões do iOS. kfd kfd, abreviação de kernel file descriptor, é um projeto para ler e escrever memória do kernel em dispositivos Apple. Ele aproveita diversas vulnerabilidades que podem ser exploradas para obter...

EchoDrv

EchoDrv ECHOAC एंटी-चीट ड्राइवर echodriver.sys में कर्नेल रीड/राइट भेद्यता का दुरुपयोग करने की अनुमति देने वाला टूल। उपयोग उदाहरण प्रायोजक मैं POST Luxembourg में कार्यरत हूँ और उनका आभारी हूँ कि उन्होंने इस प्रोजेक्ट को विकसित करने और बनाए रखने के लिए मुझे कुछ समय आवंटित किया! POST वेबसाइट पर...

cve-2019-2215_SH-M08

यह AQUOS sense 2 SH-M08 के लिए एक पोर्ट है, जो एक प्रूफ-ऑफ-कॉन्सेप्ट कोड है जो अक्टूबर 2019 से पहले के सुरक्षा पैच वाले Android उपकरणों पर रूट एक्सेस प्राप्त करता है। कार्य वातावरण निम्नलिखित OS संस्करणों पर कार्य करने की पुष्टि की गई है। अन्य संस्करणों या अन्य उपकरणों पर चलाने के लिए, कृपया...

ghostlock-s26

GhostLock CVE-2026-43499 per Galaxy S26 CVE-2026-43499 portato alla serie Samsung Galaxy S26 — Android 16 / GKI 6.12. Un solo binario, tre linee di kernel, corrispondenza dinamica dei parametri in fase di esecuzione: teoricamente copre l'intera serie S26 senza compilazione per build. La maggior...

huawei-p10-cve-2017-8890-unlock

Ricerca sullo sblocco del bootloader Huawei P10 CVE-2017-8890 Questo repository documenta un progetto di ricerca autorizzato dal proprietario che ha portato CVE-2017-8890 su un firmware Huawei P10, ha convertito la use-after-free del kernel in lettura/scrittura arbitraria del kernel e root...

weightBufs

WeightBufs: WeightBufs é um exploit de leitura/escrita r/w no kernel para todos os dispositivos Apple com suporte a Neural Engine. Bugs e exploit por @simo36; você pode ler meus slides de apresentação no POC para mais detalhes sobre as vulnerabilidades e as técnicas de exploração. O exploit não...

ZeroHVCI

ZeroHVCI - Contornando o HVCI sem privilégios de administrador ou driver de kernel O ZeroHVCI realiza leituras/gravações/chamadas de funções arbitrárias no kernel em ambientes protegidos pela Hypervisor-Protected Code Integrity HVCI sem exigir permissões de administrador ou drivers de kernel...

kernel: lib/buildid: use __kernel_read() for sleepable context

In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemapreadfolio". For the sleepable context, convert freader to use kernelread instead of direct page cache...

CentOS 9 : kernel-5.14.0-729.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the kernel-5.14.0-729.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a BUG: unable to...

Linux Distros Unpatched Vulnerability : CVE-2026-46183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree with damonsysfslock damonsysfsquotgoal-path can b...

CVE-2026-45975

In the Linux kernel, the following vulnerability has been resolved: ublk: use READONCE to read struct ublksrvctrlcmd struct ublksrvctrlcmd is part of the iouringsqe, which may lie in userspace-mapped memory. It's racy to access its fields with normal loads, as userspace may write to them...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: fsverity: The FSIOCENABLEVERITY function is rejected when called on a file descriptor in mode 3. Commit 56124d6c87fd “fsverity: support enabling with tree block size fmode & FMODEREAD condition in kernelread became reachable...

kernel: lib/buildid: use __kernel_read() for sleepable context

In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemapreadfolio". For the sleepable context, convert freader to use kernelread instead of direct page cache...

CVE-2026-43280

CVE-2026-43280 is a Linux kernel vulnerability in the drm/xe module where a malicious user can supply a malformed pat_index via the madvise IOCTL, triggering an out-of-bounds read from xe->pat.table due to missing bounds checking in xe_pat_index_get_coh_mode() (validated only by a call in madv...