68552 matches found
CVE-2026-93689
WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...
EUVD-2026-82985
WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...
CVE-2026-93689 WinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O
WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...
CVE-2026-93689
CVE-2026-93689 is a null pointer dereference in the WinFsp kernel driver's Fast I/O device control handler, affecting versions through 2.2.26215 . The handler fails to validate the volume context before use, allowing an unprivileged local user to trigger a denial of service (system crash) by open...
IOFireWireFamily-null-deref
IOFireWireFamily-null-deref IOFireWireFamily-null-deref は CVE-2017-2388 の概念実証エクスプロイトです。これは IOFireWireUserClient における NULL ポインタ参照で、macOS Sierra 10.12.4 で修正されました。この脆弱性をトリガーすると、FireWire ポートを備えたデバイスでサービス拒否が発生する可能性があります。 CVE-2017-2388 関数 IOFireWireUserClient::setAsyncRefIsochChannelForceStop は、パラメータ...
ioctlance
IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...
CVE-2026-93588
ImageMagick before 7.1.2-31 and before 6.9.13-56 is affected by a NULL pointer dereference in the PNM coder . When the coder reaches a memory resource limit at a specific point during processing, the failed allocation is not handled, causing a NULL pointer dereference. This leads to a denial of s...
EUVD-2026-82907
ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory resource limit at a specific point during processing, the failed allocation is not handled and a NULL pointer is dereferenced, which can lead to a denial of servi...
PoC-CVE-2025-69421
CVE-2025-69421 충돌 전용 재현기 이 저장소는 격리된 실험실 환경에서 CVE-2025-69421을 재현하는 최소한의 잘못된 형식의 PKCS12 파일을 포함합니다. 생성된 PFX에는 선택적 encryptedContent 필드가 생략된 EncryptedData의 EncryptedContentInfo가 포함됩니다. 취약한 OpenSSL 버전은 PKCS12unpackp7encdata에서 NULL ASN1OCTETSTRING 포인터를 PKCS12itemdecryptd2iex로 전달할 수 있으며, 이 함수는 NULL 검사 없이...
NFSundown
概要 NFSundown CVE-2025-38089 の Proof-of-Concept エクスプロイトです。NFS サーバー上でリモートからカーネルクラッシュを引き起こすことができます。 詳細 リモートの攻撃者は、特別に細工された RPC リクエストを送信することで、カーネルのヌルポインタ参照外しを引き起こし、カーネルをクラッシュさせることができます。これは、SUNRPC コードパス内の rqstp-rqacceptstatp ポインタの不適切な処理が原因で発生し、このポインタが NULL のままエラー処理ブランチで参照外しされることを許します。状況によっては...
CVE-2024-26475
CVE-2024-26475 著者 Sherlock Fang, Vlad Tronciu, Ayam Babu 説明 radareorg radare2 の v.0.9.7 から v.5.8.6 までの問題は v.5.8.8 で修正されており、ローカルの攻撃者が grubsfsreadextent 関数を介してサービス拒否を引き起こす可能性があります。 攻撃ベクトル “treeblock = grubmallocdata-blocksize;” がメモリ上の NULL を指すようにペイロードを作成し、“treeblock” の値が “tree = struct grubsfsbtree...
CVE-2009-2692
CVE-2009-2692 Linux ヌルポインタ参照 これは、https://www.exploit-db.com/exploits/9545/ で入手可能なコードのコンパイル済みバイナリです 教育目的でコンパイルされました CentOS 4.8 でコンパイルされました...
CVE-2023-3338-DECPwn
DECPwn DECnet 취약점과 널 페이지 매핑을 활성화하여 다양한 리눅스 커널 익스플로잇 기술을 연습합니다. 시나리오 모든 보호 비활성화 : qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" 코드 실행이 유저랜드의 output 함수로 리디렉션되며, 이 함수는 commitcredspreparekernelcred0를 호출합니다. 시스템 콜 후킹 mkdir 시스템 콜 핸들러 주소를 syscalltable 내에서 시나리오 1과 유사한 함수로 교체합니다. SMEP 및 KPTI 활성화...
PHP_8.1.x_Exploit
🚀 PHP CVE Autopilot 취약한 PHP CVECVE-2024-4577 우회, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 자동 탐지 및 익스플로잇 PHP8.1.xExploit.sh는 단일 파일, 설정 불필요 보안 평가 도구로, 2024년 12월 에 출시된 PHP 8.1.34 이전 버전 에 영향을 미치는 4가지 고영향 CVE 를 자동으로 발견하고 익스플로잇합니다. 수동 페이로드 제작이 필요 없습니다. URL만 제공하면 스크립트가 크롤링부터 원격 코드 실행까지 모든 작업을 수행합니...
CVE-2026-93312
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...
CVE-2026-93312
Freedesktop Poppler version 26.07.0 contains a null pointer dereference in the function JBIG2Stream::rewind (file poppler/JBIG2Stream.cc), triggered when processing a crafted JBIG2 stream. The vulnerability is exploitable remotely with user interaction required (e.g., opening a malicious PDF). Im...
EUVD-2026-82613
A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to...
UBUNTU-CVE-2026-90151
In the Linux kernel, the following vulnerability has been resolved: N...
CVE-2024-55511
CVE-2024-55511 이 저장소는 보관 처리되어 여기로 이동되었습니다. Macrium Reflect 8.1.8017 이전 버전의 null 포인터 역참조 취약점으로 인해 로컬 공격자가 특수 제작된 실행 파일을 실행하여 시스템 충돌을 유발하거나 권한을 상승시킬 수 있습니다. 현재 이 익스플로잇에 대한 분석 글write-up을 작성 중입니다. 이 분석 글은 Windows 커널 익스플로잇 분야에 처음 입문하는 분들을 위해 다소 초보자 친화적으로 구성될 예정입니다. 그러니 조금만 기다려 주세요!...