Lucene search
+L

1948 matches found

Kitploit
Kitploit
•added 2026/09/19 2:34 a.m.•15 views

AFD

AFD CVE-2022-24494 이 취약점은 임의 메모리 읽기arbitrary memory read입니다. 근본 원인은 사용자 영역user-land에서 제공된 메모리 주소에 대한 검증이 없다는 점이며, 이 주소는 memcpy 작업에서 해당 메모리 주소의 데이터를 풀 메모리pool memory로 복사하는 데 사용됩니다. 검사가 누락된 위치는 Afd!AfdTliIoControl+0x40B 입니다. 위 스크린샷에서 볼 수 있듯이, 사용자 영역 메모리 주소는 InputBuffer+0x20에서 처음 복사될 때...

7.8CVSS7.3AI score0.01905EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/18 10:08 p.m.•7 views

Driver-PiDqSerializationWrite-Example

PiDqSerializationWrite-Example コミュニティにユーティリティ関数と「PiDqSerializationWrite」関数の知識を共有してくれたbusybox10に感謝します。 https://www.unknowncheats.me/forum/3742948-post13.html CPP root@kitploit: struct memcpystructure void destination; unsigned int maxsize; unsigned int offset; unsigned char pad0xF; unsigned char...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/18 9:04 a.m.•6 views

CVE-2015-8299

knAx20150101 タイトル: KNX管理ソフトウェアETSにおけるリモートコード実行の脆弱性 カテゴリ/概要: バッファオーバーフローの脆弱性 製品: ETS Engineering Tool Software 影響を受けるバージョン: ETS 4.1.5 Build 3246 その他のバージョンは未テスト 修正されたバージョン: 不明 ベンダー: KNX Association 影響: 重大 CVE番号: CVE-2015-8299 タイムライン 2013-10-11 脆弱性の特定 2013-10-?? 1回目のベンダー連絡、ベンダーからの返答なし 2013-07-30...

9.8CVSS9AI score0.0617EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/18 5:58 a.m.•9 views

CVE-2026-23002-5G-NAS-Message-Buffer-Overflow-in-gNodeB

CVE-2026-23002 – gNodeB의 5G NAS 메시지 버퍼 오버플로우 프로그램 코드 C 시뮬레이션 root@kitploit: // gnbnassim.c - Simulated 5G gNodeB parsing NAS Registration Request include include include define MAXIESIZE 128 void processregistrationrequestuint8t nasmsg, uint16t length uint8t iebufferMAXIESIZE; // Read IE length...

5.5CVSS6.6AI score0.00156EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/17 3:38 p.m.•7 views

CVE-2020-0022

CVE-2020-0022 Android 9〜6は同様のBluetoothサブシステムを持っているようで、Android 5と4は異なる。 Android 9.0 BlueFrag 実験 パッチ: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf 以下でパッチ済みの条件に到達した。OK、理解できたと思うが、なぜかプロセスをクラッシュさせることができない。 うーん 実際には、memcpyに符号付き長さの値を渡すことに成功した 02-16...

8.8CVSS8.1AI score0.06052EPSS
SaveExploits8
OSV
OSV
•added 2026/09/16 11:16 a.m.•5 views

AZL-101298 CVE-2026-89879 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255fillbuff memcpys vc-jpgsize bytes of a captured JPEG/MJPEG frame into the vb2 plane. vc-jpgsize is taken verbatim from the S2255MARKERFRAME header the device...

0.00211EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 10:31 a.m.•5 views

EUVD-2026-80479

In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255fillbuff memcpys vc-jpgsize bytes of a captured JPEG/MJPEG frame into the vb2 plane. vc-jpgsize is taken verbatim from the S2255MARKERFRAME header the device...

5.8AI score0.00211EPSS
SaveExploits0References8
OSV
OSV
•added 2026/09/16 10:31 a.m.•6 views

CVE-2026-89879 media: s2255: bound JPEG frame size before copying into the buffer

In the Linux kernel, the following vulnerability has been resolved: media: s2255: bound JPEG frame size before copying into the buffer s2255fillbuff memcpys vc-jpgsize bytes of a captured JPEG/MJPEG frame into the vb2 plane. vc-jpgsize is taken verbatim from the S2255MARKERFRAME header the device...

SaveExploits0References11
Kitploit
Kitploit
•added 2026/09/15 9:44 p.m.•6 views

CVE-2026-22013-Hardware-Wallet-USB-Descriptor-Buffer-Overflow

CVE-2026-22013 – 하드웨어 월렛 USB 디스크립터 버퍼 오버플로우 프로그램 코드C 펌웨어 시뮬레이션 root@kitploit: // hwwalletusb.c - USB descriptor parsing with fixed buffer include void handleusbsetupchar data, int len char descriptor32; if len 0 && data0 == 0x06 // GETDESCRIPTOR // Copy descriptor payload without bounds check...

5.3CVSS7.2AI score0.00258EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/15 6:08 a.m.•11 views

CVE-2026-12485

🚨 CVE-2026-12485 - 중요 인증되지 않은 원격 코드 실행 RCE GeoVision GV-I/O Box 4E – 펌웨어 v2.09 공개일: 2026년 6월 23일 CWE: CWE-121 – 스택 기반 버퍼 오버플로 공격 벡터: 네트워크 인증 불필요 GeoVision GV-I/O Box 4E의 DVRSearch 서비스에서 인증되지 않은 스택 기반 버퍼 오버플로 취약점이 발견되었습니다. 원격 공격자는 이를 통해 임의 코드 실행을 달성하고 영향을 받는 장치를 완전히 손상시킬 수 있습니다. 📋 개요 🎯 영향받는 제품 제품|...

10CVSS7.2AI score0.00598EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/14 5:36 p.m.•10 views

CVE-2018-1932X

CVE-2018-1932X Rust 익스플로잇 POC - GIGABYTE APP Center v1.05.21 및 이전 버전 대상이 메모리 안전하지 않다고 해서 익스플로잇까지 그래야 하는 것은 아닙니다! 사용된 취약점: CVE-2018-19320 - ring0 memcpy 유사 기능 CVE-2018-19323 - MSR모델 특정 레지스터 읽기 및 쓰기 테스트 환경: 20H1: Windows 10 Kernel Version 19041 MP 1 procs Free x64 참고 자료 Vergilius 프로젝트: 커널 구조체 기가바이트...

7.2CVSS7.2AI score0.0323EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/14 12:30 p.m.•6 views

CVE-2018-19320

CVE-2018-19320 ring0 memcpy 유사 기능을 악용하여 드라이버 서명 적용DSE을 비활성화하는 방법 여기에 문서화됨: http://deniable.org/windows/windows-callbacks 참조 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320 https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities...

7.8CVSS7.5AI score0.03597EPSS
SaveExploits4
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spmi: In the tracing functions, there was an issue where access occurred beyond the bounds of the buffer. This issue was fixed by using the length “len” instead of “len + 1”. The following is a KASAN log showing the issue: BUG: I...

7.1CVSS6.1AI score0.00258EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: “vt: fix unicode buffer corruption when deleting characters” This is the same issue that was fixed for the VGA text buffer in commit 39cdb68c64d8 “vt: fix memory overlapping when deleting chars in the buffer”. The solution is als...

5.3CVSS6.1AI score0.00915EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•3 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/vboxvideo: Replace the fake VLA at the end of vbvamousepointershape with a real VLA. Replace the fake VLA at the end of the vbvamousepointershape structure with a real VLA to fix a “memcpy: detected field-spanning write error...

5.5CVSS6.5AI score0.00252EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevents stack overflow in mlxbfi2csmbusstarttransaction The memcpy function is called in a loop, without checking the upper bound of 'operation-length', and 'dataidx' is also incremented...

7.8CVSS6.1AI score0.00253EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: tools/nolibc/stdlib: fixed a memory error in realloc Pass userplen to memcpy, instead of heap-len, to prevent realloc from copying an extra sizeofheap bytes beyond the allocated region...

7.1CVSS6.1AI score0.00233EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: ipv6: Fixed warnings related to memcpy operations that span multiple fields in the AH output. These warnings occur when extension headers are copied to IPv6 address fields, causing Fortify-string warnings regarding writes...

6.1AI score0.00212EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•4 views

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...

9.8CVSS6.9AI score0.00902EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•8 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for FORTIFYSOURCE, we are performing compile-time and run-time field bounds checking for memcpy, memmove, and memset. Avoid intentionally writing across neighboring fields...

7.8CVSS6.5AI score0.00602EPSS
SaveExploits0References2
Rows per page
Query Builder