2453 matches found
CVE-2026-48977
OpenSlide is a C library for reading whole slide image files. Versions 3.4.1 through 4.0.1 are affected by an arbitrary memory write vulnerability in parse_level0_xml() within src/openslide-vendor-ventana.c. A crafted Ventana BIF file can supply nonpositive row or column tile counts, producing at...
php-bypass-disable-functions
php-bypass-disable-functions Demo project how to bypass the disablefunctions security control of PHP on Linux, where processes can inspect and even write their own memory via the special /proc/self/map file via standard file operations open/seek/read/write. Tested on PHP 7.3.5, x8664 Linux See...
CVE-2017-5123
CVE-2017-5123 Escalada de privilegios en Linux explotando la llamada al sistema waitid. El exploit es presentado por @XeR0x2A y @chaignc de HexpressoTeam únicamente con fines educativos. El error fue introducido el 21 de mayo de 2017 y corregido el 9 de octubre de 2017; se sabe que 4.14.0-rc4+ es...
CVE-2026-38053---Remove-PPL
CVE-2026-38053---Remove-PPL BYOVD Remove PPL for 24H2 and 25H2 An arbitrary memory write in the handler for IOCTL 0x12C807 METHODNEITHER of Wise System Monitor v1.5.3.127 allows attackers to cause a remove PPL or Denial of Service DoS via a crafted input. Additional Information Tested on: Windows...
RtlHijack
RtlHijack A repository with scripts to demonstrate alternative Read and Write primitives using Rtl functions the unintended way. RtlFillMemory.c RtlFillMemory takes three arguments: a pointer to the destination memory, the number of bytes to write, and a single byte value. Writes only a byte into...
CVE-2026-20687-AppleJPEGDriver-UAF
CVE-2026-20687 — AppleJPEGDriver startDecoder Timeout UAF CVE-2026-20687 · Enfilade · enfilade.io Component: Kernel Impact: An app may be able to cause unexpected system termination or write kernel memory. Description: A use after free issue was addressed with improved memory management. —Apple...
CVE-2026-12166_CVE-2026-12167_CVE-2026-12168
Múltiples vulnerabilidades de escalada de privilegios local en el controlador GFAC de Little Orbit GFACSysx64.sys | ---|--- IDs de CVE| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Proveedor| Little Orbit Producto| Controlador GamersFirst Anti-Cheat GFAC GFACSysx64.sys Versiones afectadas| No h...
CVE-2026-65357
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...
CVE-2026-65357
A memory handling flaw in Apple operating systems allows a local application to cause unexpected system termination or write kernel memory . The issue is addressed in iOS 26.6 , iPadOS 26.6 , macOS Tahoe 26.6 , tvOS 26.6 , visionOS 26.6 , and watchOS 26.6 . The CVSS 3.1 base score is 7.8 (HIGH) ,...
CVE-2026-65357
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...
EUVD-2026-77883
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory...
CVE-2024-2887
CVE-2024-2887 Esta es una breve descripción del CVE-2024-2887, que utilicé para reclamar V8CTF M123. Cuando se definen más tipos que kV8MaxWasmTypes, lo cual se puede lograr añadiendo más tipos en RecGroup, el índice de tipos puede superar los 20 bits y entonces desbordarse. De este modo, dos tip...
cve-2014-0038
Local root exploit for CVE-2014-0038 Error: La llamada al sistema X86X32 recvmmsg no sanitiza correctamente el puntero de tiempo de espera recibido desde el espacio de usuario. Primitiva del exploit: Pasar un puntero a una dirección del kernel como tiempo de espera para recvmmsg; si se conoce el...
Astra Linux – Vulnerability in PHP 7.3
In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25, and 8.0.x below 8.0.12, when running PHP FPM SAPI with the main FPM daemon process running as the root user and child worker processes running as lower-privileged users, it is possible for the child processes to access memory...
CVE-2017-16995
Ubuntu en su versión más reciente Ubuntu 16.04 presenta una vulnerabilidad de escalada de privilegios local de alto riesgo, con el identificador CVE-2017-16995. Esta vulnerabilidad existe en el subsistema del kernel de Linux que invoca a eBPF bpf2; cuando un usuario proporciona un programa BPF...
CVE-2012-6422
Exynos Exploit Esto es una POC para explotar la vulnerabilidad /dev/exynos-mem introducida en teléfonos Samsung anteriores. Se realizó por interés en la investigación de vulnerabilidades del kernel y como parte de un desafío CTF. El Exploit La vulnerabilidad introducida en estos teléfonos son los...
CVE-2017-5123
README Nota : El código en este repositorio es para demostrar el aislamiento de tecnologías de sandbox de pods seguros como kata containers y no pretende atacar ninguna plataforma. Cómo reproducir Obtenga el kernel de Linux 4.13.0 Aplique el parche...
UBUNTU-CVE-2026-89482
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in writezeroes processing" established that blkrqpayloadbytes must not be read without first checking...
EUVD-2026-76388
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in writezeroes processing" established that blkrqpayloadbytes must not be read without first checking...