cve-2023-31346-poc

Perdita di memoria del firmware Il codice qui mira a dimostrare le perdite di memoria negli header dei messaggi guest e nel messaggio guest della richiesta CPUID. Prerequisiti Installare rustup. Installare un kernel Linux con supporto host SEV-SNP. Ho usato un kernel con alcune mie patch...

cve-2025-24054

CVE-2025-24071: NTLM-Hash-Leck über .library-ms-Datei Metasploit-Modul Dieses Repository enthält ein Metasploit-Modul , das CVE-2025-24071 ausnutzt, eine Schwachstelle im Windows Explorer, die NTLM-Hashes preisgibt, wenn eine bösartige .library-ms-Datei aus einem ZIP-Archiv extrahiert wird...

CVE-2018-17240_exploit

CVE-2018-17240exploit Exploit Bash per CVE-2018-17240 Perdita di memoria delle telecamere Netwave Esegui questo exploit su una telecamera Netwave vulnerabile per ottenere la configurazione di rete e le credenziali della telecamera. Le credenziali "Possibile Nome Utente" e "Possibile Password"...

CVE-2026-27886

CVE-2026-27886 Strapi PoC Solo per test di sicurezza autorizzati. Strapi che perde dati sensibili tramite filtraggio relazionale a causa della mancanza di sanitizzazione delle query. Include: CVE-2026-27886.py - PoC Python CVE-2026-27886.yaml - template Nuclei per il rilevamento Cosa controlla Il...

TeamsNTLMLeak

Descrizione Quando un utente naviga verso una scheda "Sito Web" che rimanda a una pagina web appositamente progettata, può verificarsi l'esposizione dell'hash NTLM tramite l'attivazione di uno schema URL di Office, riducendo il processo a un percorso di leak con un solo clic. Se si tenta di aprir...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 Un piccolo strumento per creare un PoC per CVE-2000-0649. Utilizzo Questo script verifica se il server è vulnerabile a CVE-2000-0649. Tieni presente di provare con HTTP, HTTPS e percorsi diversi. Nella mia esperienza, la divulgazione avviene principalmente quando ci si connette...

CVE-2026-80708

This Linux kernel vulnerability affects the s390/zcrypt subsystem, specifically the cca_clr2cipherkey() function used during clear key to secure key token import. The root cause is that the internal helper _ip_cprb_helper() used internal buffer memory for building and processing CPRBs but never s...

CVE-2026-80707

CVE-2026-80707 affects the Linux kernel's CAN J1939 transport subsystem. The function j1939_session_fresh_new() allocates a receive buffer without zeroing it, leaving residual data from prior allocations that could be exposed to a session participant. The root cause is an uninitialized memory dis...

CVE-2026-80687

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

EUVD-2026-67563

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

cve-2019-6207

CVE-2019-6207 root@kitploit: $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct...

CVE-2020-35667-PoC

CVE-2020-35667-PoC Panoramica DICHIARAZIONE DI NON RESPONSABILITÀ Il comportamento vulnerabile illustrato di seguito è stato verificato empiricamente da artefatti decompilati e corretti, che cercano di somigliare alla vulnerabilità originale dedotta con un approccio euristico, poiché la versione...

CVE-2026-80671 perf sched: Fix register_pid() overflow, strcpy, and BUG_ON

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

EUVD-2026-67538

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80662 cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80662 cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80654

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel is requested using mboxrequestchannelbyname in probe. In remove callback, the rx mailbox channel is cleaned up when the rxchan is NULL due to incorrect condition...

CVE-2026-80654

CVE-2026-80654 affects the soc: xilinx driver in the Linux kernel . A use-after-free occurs in the rx mailbox channel handling: an incorrect condition check in the remove callback prevents proper cleanup when rx_chan is non-NULL, leaving the mailbox channel active after device removal. The channe...

CVE-2026-80650

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

CVE-2026-80650

CVE-2026-80650 affects the Linux kernel 's media: atomisp: gc2235 camera sensor driver. The root cause is incorrect error-path handling in gc2235_probe(): if media_entity_pads_init() fails, the probe routine calls gc2235_remove() which frees the device structure, but execution then falls through ...