Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-

Взгляд на XNU через трубку: разбор CVE-2018-4242 Чжо Лян из Qihoo 360 Nirvan Team Содержание 1 Введение 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 Ядро XNU 2 2.1 Системные вызовы . . . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

SUSE CVE-2026-64474

In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...

UBUNTU-CVE-2026-64474

In the Linux kernel, the following vulnerability has been resolved: vfio: prevent infinite loop in vfiomiggetnextstate on blocked arc vfiomiggetnextstate walks vfiofromfsmtable one step at a time, looping to skip optional states the device does not support until nextfsm is supported. A blocked...

CVE-2026-24197

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...

CVE-2026-24197

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...

CVE-2026-24197

NVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU MIG partition management, where an insecure default initialization of memory subsystem routing resources could lead to data corruption or a hang during partition reconfiguration. A successful exploit of this...

CVE-2026-24197

CVE-2026-24197 affects NVIDIA’s Linux GPU Display Driver, specifically the Multi-Instance GPU (MIG) partition management. The issue is an insecure default initialization of memory subsystem routing resources, which can cause data corruption or a hang during MIG partition reconfiguration. A succes...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (May 2026)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability exists where an attacker could leak held driver locks, potentially leading to denial of service...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, cloudflared-fips, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, cadvisor-fips, nri-apache-fips, keda-fips, vexctl, chartmuseum-fips, nri-f5-fips, prometheus-pushgateway-fips, x509-certificate-exporter-fips, tetragon,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, cloudflared-fips, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, cadvisor-fips, nri-apache-fips, keda-fips, vexctl, chartmuseum-fips, nri-f5-fips, prometheus-pushgateway-fips, x509-certificate-exporter-fips, tetragon,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, cloudflared-fips, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, cadvisor-fips, nri-apache-fips, keda-fips, vexctl, chartmuseum-fips, nri-f5-fips, prometheus-pushgateway-fips, x509-certificate-exporter-fips, tetragon,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: cadvisor-fips, hcl2json, keda-fips, chartmuseum-fips, vexctl, x509-certificate-exporter-fips, haproxy-ingress, pulumi-language-java, spilo, azuredisk-csi-fips, terraform-provider-sendgrid-fips, harbor, spire-controller-manager, helm-diff-fips, nri-nginx-fips,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: multus-cni-fips, cloudflared-fips, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, cadvisor-fips, nri-apache-fips, keda-fips, vexctl, chartmuseum-fips, nri-f5-fips, prometheus-pushgateway-fips, x509-certificate-exporter-fips, tetragon,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: multus-cni-fips, cloudflared-fips, grafana-operator, kube-rbac-proxy-fips, argo-workflows-fips, cadvisor-fips, nri-apache-fips, keda-fips, vexctl, chartmuseum-fips, nri-f5-fips, prometheus-pushgateway-fips, x509-certificate-exporter-fips, tetragon,...

📄 macOS Sierra 10.12 Build 16A323 Double-Free / Privilege Escalation

macOS Sierra version 10.12 Build 16.A323 local privilege escalation proof of concept exploit. A flaw in the MIG ownership model within the ioserviceaddnotificationool routine of IOKit allows a malicious user to leak Mach port send-right references. By repeatedly invoking notifications with...

EUVD-2019-17939

Malware in sbrugna...

EUVD-2021-27158

Malware in sbrugna...

China Mobile多款产品 安全漏洞

China Mobile P22g-CIac and others are an IoT enterprise gateway from China Mobile China, a Chinese company. A security vulnerability exists in various China Mobile products, which stems from improper authorization. The following products and versions are affected: China Mobile P22g-CIac,...

China Mobile多款产品 安全漏洞

China Mobile P22g-CIac and others are an IoT enterprise gateway from China Mobile China, a Chinese company. A security vulnerability exists in various China Mobile products that stems from the use of default credentials. The following products and versions are affected: China Mobile P22g-CIac,...