Intel-CVE-2015-2291

Intel-CVE-2015-2291 Exploit PoC para CVE-2015-2291 Ataque solo de datos para obtener un shell del sistema con el controlador vulnerable de Intel. El código en sí mismo implementa más "funcionalidad" proporcionada por el controlador, como la traducción de direcciones físicas a virtuales, mapeo de...

CVE-2026-29923

CVE-2026-29923 - Local Privilege Escalation via Arbitrary Physical Memory Mapping The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual address space. This primitive allows full read/write access to the...

asus-bsitf-0-day-poc

PoC - Mapeo de Memoria del Kernel a Modo Usuario en ASUS bsitf.sys CVE-2026-13585 Resumen El controlador de kernel de ASUS bsitf.sys también distribuido como AsusBSItf.sys expone el IOCTL 0x222808 que asigna memoria del kernel físicamente contigua de un tamaño controlado por el atacante, la mapea...

ios-malicious-bithunter

iOS Malicious Bit Hunter Resumen iOS Malicious Bit Hunter es un motor de detección de complementos maliciosos para aplicaciones iOS. Puede analizar el encabezado del archivo macho de la biblioteca dinámica dylib inyectada basándose en el tiempo de ejecución, y puede realizar análisis de...

MemoryMapper

Memory Mapper Memory Mapper es una librería ligera que permite mapear tanto ensamblados nativos como administrados en memoria, ya sea mediante inyección en un proceso especificado por el usuario o autoinyección; la técnica de inyectar un ensamblado en el proceso que actualmente está intentando...

LdrLibraryEx

LdrLibraryEx A small x64 library to load dll's into memory. Features low dependencies & function use only ntdll.dll used position independent code lightweight and minimal easy to use load modules from memory load modules from disk api sets support bypass image load callbacks using private memory...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Privacy, Driver & Memory Strings Process Hacker memory analysis of the setup.exe dropper reveals that Lumma Stealer targets privacy settings, installs drivers, and manages memory. Key Strings Observed: Privacy Camera – Attempts to access or disable camera privacy settings. Privacy...

Eneio64-LPE

Abre un manejador al controlador vulnerable 2. Mapea la memoria física al espacio de usuario 3. Abre un manejador al proceso System 4. Consulta la tabla SystemHandleInformation del proceso actual para obtener el manejador del sistema filtrado, filtrando su dirección EPROCESS. 5. Recorre los...

PT-2026-83024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmclock miscdev mmap function within the drivers/ptp/ptp vmclock.c file. This flaw allows read-only mappings to become writable, which may impact the...

CVE-2026-80582

A flaw was found in the Linux kernel's drm/shmemhelper component. This vulnerability arises from insufficient boundary checks when handling large memory pages. An attacker could potentially trigger an attempt to map memory outside its designated area. This improper memory handling could lead to a...

CVE-2026-74641

A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Maps shared memory as WC, not WB. Linux does not write to the cmd-db region. This memory region is protected from writing by XPU. XPU may sometimes falsely detect a clean cache eviction as a “write” to the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: TCP: fixed page frag corruption upon a page fault. Steffen reported a corruption of the TCP stream for HTTP requests served by the Apache web-server, using a CIFS mount-point and the corresponding file’s memory mapping. The root...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses Since commit a4d5613c4dc6 “arm: extend pfnvalid to take into account freed memory map alignment” changes the semantics of pfnvalid to check the presence ...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPI: Tables: FPDT: Do not call acpiosmapmemory on an invalid physical address. On a Packard Bell Dot SC Intel Atom N2600 model, there is an FPDT table containing invalid physical addresses, with high bits set that fall outside t...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/rds: fixed the possible null dereference of cp The cp parameter may be null. Calling cp-cpconn would result in a null dereference. Simon Horman adds: Analysis: cp is a parameter of rdsrdmamap and is not reassigned. The...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fixed page mapping when vmareaallocpages uses high-order fallback to order 0. The vmappagesrangenoflush function assumes that its argument pages contains pages with the same page shift. However, since commit...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

Guests running on Arm can cause Denial of Service DoS attacks on Dom0 through PV devices. When mapping memory pages of guests on Arm, Dom0 uses an rbtree to keep track of the foreign mappings. The update of this rbtree does not always occur completely with the relevant lock held, resulting in a...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: regulator: stm32-pwr: Fix for the ofiomap leak. Suggestions: - In the file drivers/regulator/stm32-pwr.c, line 166 of stm32pwrregulatorprobe: The “base” from the ofiomap function is not released when the stm32pwrregulatorprobe...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/ioremap: Maps EFI-reserved memory as encrypted for SEV. Some drivers require memory that is marked as EFI boot services data. To prevent this memory from being reused by the kernel after ExitBootServices, efimemreserve is use...