windows-exploit

windows-exploit windows-exploit is a Windows vulnerabilit...

IntelTXE-PoC

고지 사항 모든 정보는 교육 목적으로만 제공됩니다. 이 지침을 따르는 것은 사용자 본인의 책임입니다. 저자와 해당 고용주는 이 페이지에 포함된 정보를 기반으로 행동하거나 행동하지 않은 개인이나 조직으로 인해 발생하는 직접적 또는 간접적 손해나 손실에 대해 책임을 지지 않습니다. 목차 소개 필요한 소프트웨어 페이로드 생성 잠금 해제 토큰 생성 SPI 플래시 이미지 준비 펌웨어 이미지에 파일 통합 OEM 서명 비활성화 펌웨어 이미지 빌드 메인 CPU 기동BringUP SPI 플래시에 이미지 쓰기 USB 디버그 케이블 준비...

MongoBleed-exploit

CVE-2025-14847: Лаборатория MongoBleed logo.svg Содержание 1. Введение 2. Детали уязвимости Как это работает 3. Воздействие 4. Архитектура лаборатории 5. Предварительные требования 6. Установка и использование 1. Запуск окружения 2. Установка зависимостей 3. Проверка настройки лаборатории...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

iQOO Neo7 Racing Edition PD2232 – BL-Free Privilege Escalati...

EUVD-2026-91136

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' Security Update for Multiple ASUS Motherboards ' section on the ASUS Security Advisory for more information...

CVE-2026-93495

A vulnerability exists in certain ASUS motherboards due to improper initialization . This flaw allows a physically proximate user to read or write arbitrary memory by inserting a specially crafted device . The vulnerability has a high severity score of 7.0 (CVSS 4.0) and requires physical access....

EUVD-2025-209815

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...

Rocky Linux 9.6 [TuxCare] Security Update: jq / jq-devel (ALMALINUX9.6:CLSA-2026:1786762772)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786762772 advisory. - jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly t...

AlmaLinux 9.2 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.2:CLSA-2026:1784553427)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784553427 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

Rocky Linux 8 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3546)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243546 advisory. ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Buffer overread vulnerability in StringIO CVE-2024-27280 ruby: Arbitrary memory...

AlmaLinux 9.6 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.6:CLSA-2026:1784554254)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784554254 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

AlmaLinux 9.2 [TuxCare] Security Update: libX11 / libX11-common / libX11-devel / libX11-xcb (ALMALINUX9.2:CLSA-2025:1745588411)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745588411 advisory. - A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigge...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2024_0955)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240955 advisory. Mozilla: Out-of-bounds memory read in networking channels CVE-2024-1546 Mozilla: Alert dialog could have been spoofed on another site CVE-2024-1547 Mozilla...

MongoDB Compass < 1.39.4 Out-of-bounds Memory Access

The version of MongoDB Compass installed on the remote host is prior to 1.39.4. It is, therefore, affected by a vulnerability in the bundled Electron runtime, which was updated to version 24.8.2 in this release: - Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed ...