15851 matches found
CVE-2026-80630
A flaw was found in the Linux kernel's fqcodel Fair Queueing Controlled Delay network scheduler. When fqcodel drops packets during a peek operation, it incorrectly calls qdisctreereducebacklog before restoring the queue length. This can lead to the parent's class being mistakenly deactivated,...
CVE-2026-80637
A flaw was found in the Linux kernel's netfilter synproxy component. This vulnerability is due to unaligned memory access when adjusting timestamp fields. An attacker could potentially trigger this flaw by sending specially crafted network traffic, leading to performance degradation or a system...
CVE-2025-27840-WIP
CVE-2025-27840-WIP CVE-2025-27840 の作業中 CVE-2025-27840 概要 CVE-2025-27840 は中程度の脆弱性(CVSS 6.8 )であり、世界中で10億台以上のIoTデバイスに組み込まれているEspressifのESP32 Bluetoothチップ に影響を与えます。この欠陥には、不正なメモリアクセスとデバイス制御を可能にする可能性がある29個の文書化されていないホストコントローラインターフェース(HCI)コマンド が含まれます。 🔧 主要な技術的詳細 ESP32 ファームウェアバージョン 2025-03-06 に影響...
CVE-2026-80645
A flaw was found in the Linux kernel's rapidio/tsi721 component. This vulnerability arises from incorrect handling of a variable within a specific loop in the tsi721dbdpc function. If a particular item is not found, the system attempts to access invalid memory. This could allow a local attacker t...
CVE-2017-16995
Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...
CVE-2026-80695
A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the...
cve-2026-29923
CVE-2026-29923 — локальное повышение привилегий в pstrip64.sys Минимальный proof-of-concept для CVE-2026-29923 — уязвимости в драйвере ядра pstrip64.sys EnTech Taiwan PowerStrip ≤ 3.90.736, которая позволяет непривилегированному процессу в режиме пользователя повысить привилегии до NT...
ThrottleStopPPL
ThrottleStopPPL Un outil de preuve de concept pour gérer les niveaux de protection Protected Process Light PPL sous Windows Server 2022 en exploitant des vulnérabilités du pilote ThrottleStop CVE-2025-7771. Aperçu Cet outil démontre une élévation de privilèges grâce à des capacités de...
CVE-2025-7771
CVE-2025-7771 Простой PoC, демонстрирующий уязвимость в драйвере ThrottleStop.sys, показывающий возможности произвольного чтения и записи физической памяти, а также трансляцию виртуальных адресов в физические с помощью Superfetch. ⚡ Использование: 1. Зарегистрируйте службу: Запустите cmd.exe с...
cormem-read-poc
DISCLAIMER : This project is for educational and security research purposes only. Use only on systems you own or have explicit permission to test. Unauthorized use may be illegal in your jurisdiction. cordrvexploit — CVE-2026-38194 Vulnerability This tool demonstrates CVE-2026-38194, a...
throttlestop-exploit-rw
Mappeur de mémoire physique Outil de recherche démontrant l'accès à la mémoire physique via la traduction d'adresses virtuelles en physiques combinée à l'exploitation d'un pilote vulnérable. Aperçu Ce projet explore la gestion de la mémoire Windows de bas niveau en combinant la technique superfet...
CVE-2025-7771-Vulnerability-Exploration
🔓 Эксплойт ядра ThrottleStop.sys — Маппер физической памяти, совместимый с HVCI CVE-2025-7771 — Произвольное чтение/запись физической памяти через IOCTL драйвера ThrottleStop.sys ⚠️ Отказ от ответственности Данный проект опубликован только в образовательных и исследовательских целях. Цель —...
CVE-2025-8061-Exploit
CVE-2025-8061 Эксплойт Обзор PoC-эксплойт для LnvMSRIO.sys драйвер ввода-вывода MSR Lenovo, демонстрирующий произвольное чтение/запись физической памяти и доступ к памяти ядра через трансляцию VA-to-PA Superfetch. Информация о драйвере Свойство| Значение ---|--- Имя драйвера| LnvMSRIO.sys Имя...
Linux Distros Unpatched Vulnerability : CVE-2026-80630
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schfqcodel: Do not call qdisctreereducebacklog during peek before restoring qlen Whenever fqcodel drops packets during peek, it calls...
Linux Distros Unpatched Vulnerability : CVE-2026-80624
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than...
qiomem
Beschreibung Beliebige physische Speicher-Lese-/Schreibzugriffe über den Toshiba-Treiber qiomem.sys aus Ring 3 funktioniert nur bis zu 4 GB physische Adressen. Driver wird über den Microsoft Update-Katalog verteilt. Andere Varianten. Nicht in der Microsoft Vulnerable Driver List enthalten, es wur...
cve-2025-7771
CVE-2025-7771 — LPE di ThrottleStop.sys Proof-of-concept per CVE-2025-7771. ThrottleStop.sys espone due gestori IOCTL che consentono lettura/scrittura arbitraria della memoria fisica senza alcun controllo degli accessi — qualsiasi processo amministrativo può leggere o scrivere ovunque nella RAM...
HPHardwareDiagnostics-PoC
HPHardwareDiagnostics-PoC PoC-Exploit für den EtdSupp-Treiber von HP Hardware Diagnostic CVE-2023-32673/PSR-2022-0209 Erstellen In Visual Studio 2019 öffnen Im Release-Modus erstellen Bewundern oder auch nicht Zusammenfassung Ziemlich simpler kleiner Treiber mit Lese-/Schreibzugriff auf virtuelle...
AZL-98132 CVE-2026-80637 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory acces...
CVE-2026-80637
In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory acces...