libget_user_exploit

这个库利用CVE-2013-6282漏洞读取内核内存。...

libmsm_vfe_read_exploit

使用 CVE-2014-4321 读取内核内存...

CVE-2020-1206-POC

CVE-2020-1206 未初始化内核内存读取 POC c 2020 ZecOps, Inc. - https://www.zecops.com - 寻找攻击者的错误 用于检查 CVE-2020-1206 / "SMBleed" 的POC 预期结果：包含目标计算机内核内存的本地文件。 仅用于教育和企业环境测试。 ZecOps 不对代码承担任何责任，使用风险自负。 如果您对用于服务器、终端和移动设备的无代理 DFIR 工具感兴趣，请通过 [email protected] 联系我们，这些工具能够自动检测 SMBleed 及其他类型的攻击。 用法 SMBleed.exe...

CVE-2025-65264

CVE-2025-65264 描述 在 CPU‑Z 2.17 及更早版本（以及其他使用 CPU-Z 驱动程序 1.0.6.1 及更早版本的产品）中，驱动程序（例如 cpuz161.sys）从用户提供的地址解引用一个值，并将其写入调用者提供的系统缓冲区。攻击者可以通过在输入缓冲区中提供目标地址，通过 IOCTL 读取任意内核内存。 PoC 这是一个简单的 PoC，用于读取 System 进程的令牌。 影响 这可能导致信息泄露。它还可以与存在任意内核写入漏洞的驱动程序结合，实现内核代码执行。 示例输出 免责声明...

CVE-2025-67246

CVE-2025-67246 脆弱性タイトル : LuDaShi の不適切なアクセス制御 影響を受けるバージョン : 6.1026.4505.112 未満 発見日時 : 2025年12月2日 発見者 : ZhouRui 分析レポート : LuDaShi は、無料のハードウェア認証、コンピュータ（携帯電話）の安定性保証、システムパフォーマンスの向上を提供する、よく知られた無料のシステムユーティリティソフトウェアです。LuDaShi およびその関連システム製品（コンピュータパフォーマンス最適化、システムパフォーマンス監視）に含まれる ComputerZx64.sys...

CVE-2026-14960-CVE-2026-14961

Pegatron TdeIo64 驱动程序（tdeio64.sys）中的权限提升漏洞 | ---|--- CVE 编号| CVE-2026-14960, CVE-2026-14961 厂商| Pegatron Corporation 产品| TdeIo 驱动程序（tdeio64.sys） 设备接口| \.\TdeIo 漏洞类型| 不当的访问控制（CWE-284）、任意内核内存读/写（CWE-787/CWE-125）、未受保护的 I/O 端口访问 影响| 权限提升至 SYSTEM、硬件级入侵 攻击向量| 本地 所需权限| 低（任何本地用户） 测试平台| Windows 10/11 x64...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098785)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098785 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master conntrac...

CVE-2026-9728

CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg->data/msg->size by reading them directly from live userspace memory, then forwards the o...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel up to version 6.3.1, a use-after-free issue in Netfilter’s nftables module arises when processing batch requests. This allows unprivileged local users to obtain root privileges. The issue occurs due to improper handling of anonymous sets...

Astra Linux – Vulnerability in Linux, Linux 5.10

A vulnerability was discovered in the drivers/usb/gadget/function/rndis.c file within the Linux kernel before version 5.16.10. The RNDIS USB gadget does not include validation for the size of the RNDISMSGSET command. Attackers can obtain sensitive information from the kernel memory...

CVE-2026-77237

Missing queue-set type validation in xQueueAddToSet in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSEQUEUESETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77237

FreeRTOS-Kernel before version 11.3.1 contains a missing queue-set type validation in the xQueueAddToSet() function. On MPU-enabled ports with configUSE_QUEUE_SETS=1 , an unprivileged task can exploit this to read privileged kernel memory , crossing the memory protection boundary. The CVSS 3.1 sc...

CVE-2026-72195 fs/ntfs3: bound attr_off in UpdateResidentValue against data_off

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attroff in UpdateResidentValue against dataoff In doaction's UpdateResidentValue case fslog.c:3307, lrh-attroff and lrh-redolen come from the on-disk LRH. When they satisfy aoff + dlen res.dataoff, the assignment...

CVE-2026-72011 s390/diag: Add missing array_index_nospec() call to memtop_get_page_count()

In the Linux kernel, the following vulnerability has been resolved: s390/diag: Add missing arrayindexnospec call to memtopgetpagecount 'level' is user space controlled and used to read from an array. Add the missing arrayindexnospec call to prevent speculative execution...

PT-2026-72076

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The user-space system-call verifier z vrfy z log msg static create in subsys/logging/log msg.c fails to perform mandatory K SYSCALL checks, acting as a...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

EUVD-2026-54645

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

CVE-2026-43681

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A local user may be able to read kernel memory...

CVE-2026-28896

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory...