CVE-2025-22457-vulnserver-lab

step 1 environment setting 權限&執行腳本 使用windows的話可以開wsl執行 chmod +x setupenvironment.sh ./setupenvironment.sh step 2：尋找動態數值 需要手動的步驟 由於記憶體位址和 IP 在不同環境中是動態的，需要手動找到它們，並更新 exploit.py 腳本。 2.0 先開啟兩個attacker docker和一個victim docker作為後續準備 docker exec -it atac /bin/bash docker exec -it vic /bin/bash 2.1 尋找...

xperia_5_bl_unlocker_poc

Can't use as is, since memory address maybe different for each device This is for archival purposes...

PT-2026-81366

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

CVE-2026-72402

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier logging mechanism. The printbpfinsn function, responsible for masking sensitive pointer values in verifier logs, did not correctly mask all pseudo-pointer types. This oversight could lead to kernel memory addresses being...

CVE-2026-72045

A flaw was found in the Linux kernel component octeontx2-af. A local attacker with access to a Virtual Function VF could exploit an unsanitized input in the rvumboxhandlerlmtsttblsetup function. This vulnerability allows the VF to read the physical base address of another function's LMTLINE, whic...

EUVD-2026-59486

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Clear variable event pointer on read sndseqread copies a queued variable-length event header to userspace before expanding the payload. Queued variable-length events use SNDRVSEQEXTCHAINED internally, and data.ext.ptr...

CVE-2026-68454

A flaw was found in the KVM Kernel-based Virtual Machine subsystem of the Linux kernel, affecting the s390 PCI implementation. When a guest operating system registers interrupt requests IRQs without a specific summary bit, the system incorrectly stores an invalid memory address. This improper...

CVE-2026-49746 GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages...

CVE-2025-51678

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior...

CVE-2025-51678

The RISC-V PicoRV32 processor (specifically commit 87c89a ) is affected by a vulnerability where a mismatch between the PCPI INSN and the memory address can lead to unexpected behavior. PCPI is a mechanism used to handle specific processor control instructions. No information regarding a patched ...

CVE-2025-51678: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior...

CVE-2025-51678

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior...

CVE-2025-51678

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior...

PT-2026-60870

Name of the Vulnerable Software and Affected Versions RISC-V PicoRV32 version 87c89a Description A mismatch between the PCPI INSN and the memory address can result in unexpected behavior. PCPI Processor Control Interface is a mechanism used to handle specific processor control instructions...

CVE-2025-51678

An issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior...

CVE-2026-10588

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

EUVD-2026-44980

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

PT-2026-60511

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory...

PT-2026-53634

Summary A chain of vulnerabilities in vLLM allow Remote Code Execution RCE: 1. Info Leak - PIL error messages expose memory addresses, bypassing ASLR 2. Heap Overflow - JPEG2000 decoder in OpenCV/FFmpeg has a heap overflow that lets us hijack code execution Result: Send a malicious video URL to...

UBUNTU-CVE-2026-53159

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix DMA address corruption due to findvma misuse fastrpcgetargs uses findvma to look up the VMA for a user-provided pointer and compute a DMA address offset. When the address falls in a gap before the returned VMA,...