KslDump

KslDump - BMVD Traiga el Controlador Vulnerable de Microsoft Contexto importante Reporté el problema a Microsoft el 7 de marzo de 2026. Sin embargo, casi 20 días antes, la comunidad de modding de juegos ya lo había invertido y discutido públicamente. Por mi parte, no sigo sus proyectos y no estab...

CVE-2024-30804

PoC de LPE del controlador ASUS Abuso de memoria física Esta es una PoC para Escalada de Privilegios Local LPE que explota el controlador AsInsHelp64.sys. Abusa de un controlador legítimo y firmado de ASUS para mapear memoria física y sobrescribir tokens del kernel, obteniendo finalmente...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – eBPF Verifier Type Confusion → Kernel Memory Read/Write Overview A subtle integer overflow in the eBPF verifier’s bounds tracking allows an attacker to craft an eBPF program that accesses out‑of‑bounds kernel memory. Severity: Critical Kernel Privilege Escalation User‑mode eBPF...

Centry

Centry ADVERTENCIA: ESTE ES UN SOFTWARE EXPERIMENTAL. ES PROBABLE QUE CONTENGA ERRORES. Actualizaciones Si ya has instalado Centry, por favor ejecuta git pull para actualizar a la última versión. Las últimas actualizaciones lo hacen mucho más seguro contra ataques de repetición. Introducción Cent...

cve-2024-0519-rca-research

CVE-2024-0519 — RCA Research Artefactos de análisis de causa raíz para CVE-2024-0519 acceso a memoria fuera de los límites en V8, Chrome 120, explotado activamente. Corrección : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 Versión de V8 estudiada : 12.0.267.16 fbc4963bbff,...

kur

kur Un código que simplemente ofrece la capacidad de leer/escribir memoria en modo kernel desde el modo usuario utilizando un driver firmado vulnerable. Simplemente utiliza MmCopyVirtualMemory, una API no documentada aunque una de las más comunes, en modo kernel para que puedas leer/escribir...

CVE-2022-22077

✅ Marco de explotación de CVE-2022-22077 RTCore64.sys: Este documento proporciona una visión general completa del marco de explotación de CVE-2022-22077, un sofisticado kit de herramientas de ataque BYOVD Bring Your Own Vulnerable Driver que apunta a la vulnerabilidad del controlador RTCore64.sys...

CVE-2023-20564

CVE-2023-20564 - PoC de Acceso a Memoria Física del Driver AMD Ryzen Master Resumen Este repositorio contiene una Prueba de Concepto PoC que demuestra la vulnerabilidad CVE-2023-20564 en el Driver AMD Ryzen Master. La vulnerabilidad permite a usuarios no privilegiados leer y escribir memoria físi...

memoro

Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Lectura/escritura arbitraria de memoria física y puertos de E/S a través del controlador ThrottleStop ThrottleStop es una pequeña aplicación legítima utilizada para monitorear y corregir la limitación de la CPU. Tiene un controlador que facilita estas tareas y, en ...

CVE-2022-3699

CVE-2022-3699 Exploit de prueba de concepto para CVE-2022-3699 Exploit probado en Windows 10 22H2 build 19045.4651 y build 19045.3803 La vulnerabilidad permite a usuarios sin privilegios acceder a funcionalidad que permite leer y escribir desde la memoria física desde la instancia del kernel; sin...

Linux Distros Unpatched Vulnerability : CVE-2026-89482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-tcp: do not accept C2HData based on blkrqpayloadbytes alone Commit 25e5cb780e62 nvme-tcp: fix possible crash in writezeroes processing established that...

Linux Distros Unpatched Vulnerability : CVE-2026-80950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: renesas: Check that the transfer is valid before accessing it The Renesas I3C driver uses an asynchronous model to transfer data. It prepares a struct...

Linux Distros Unpatched Vulnerability : CVE-2026-89489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the or1k ABI takes two user pointers, v1 and v2, and swaps the...

CVE-2026-89441

A flaw was found in the Linux kernel, specifically within the mmc: via-sdmmc driver responsible for managing SD and MultiMediaCard MMC devices. This vulnerability occurs during device removal, where a timing issue allows a process to attempt to access memory that has already been released. This...

CVE-2026-89455

A flaw was found in the Linux kernel's PCI PLDA driver. During the teardown of Interrupt Request IRQ domains, the system can attempt to access memory that has already been freed. This 'use-after-free' vulnerability occurs because the domain's internal data is released before all associated IRQs a...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC PoC exploit for HP Hardware Diagnostic's EtdSupp driver CVE-2023-32673/PSR-2022-0209 Building Open in Visual Studio 2019 Build in release Admire or don't Summary Pretty simple little driver with virtual memory r/w, no MmMapIoSpace, etc. Disclaimer Diet soda is disgusting...

CVE-2026-89482

A flaw was found in the nvme-tcp module of the Linux kernel. This vulnerability arises from improper handling of C2HData for REQOPWRITEZEROES commands, where the system fails to adequately validate the data length. A remote attacker could exploit this by sending specially crafted C2HData, leading...

CVE-2026-89489

In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the "or1k" ABI takes two user pointers, v1 and v2, and swaps the words they point to in hand-written assembly. l.lwz r29,0r4 l.lwz...

AZL-100697 CVE-2026-89489 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: openrisc: fix arbitrary kernel memory access via or1katomic syscall sysor1katomic syscall 244 in the "or1k" ABI takes two user pointers, v1 and v2, and swaps the words they point to in hand-written assembly. l.lwz r29,0r4 l.lwz...