Lucene search
+L

982 matches found

Kitploit
Kitploit
added 2026/09/13 1:19 p.m.6 views

nftables-oob-read-write-exploit-CVE-2023-35001-

Exploit de lectura/escritura fuera de límites OOB en nftables CVE-2023-35001 Exploit utilizado en pwn2own Vancouver 2023 en Ubuntu de escritorio. El exploit admite la versión del kernel disponible al comienzo del evento 5.19.0-35. Requisitos Compilador de C Compilador de Go Uso root@kitploit: Bui...

7.8CVSS6.9AI score0.01508EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 5:33 a.m.6 views

cve-2023-21987-poc

cve-2023-21987-poc Vulnerabilidad de lectura fuera de los límites OOB-Read en VGA de Oracle VirtualBox Este Prueba de Concepto PoC está diseñado para un sistema operativo invitado Linux que se ejecuta en un sistema operativo anfitrión Windows. El propósito de este PoC es demostrar la capacidad de...

7.8CVSS7AI score0.00671EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 2:52 a.m.10 views

CVE-2022-1015

CVE-2022-1015 Un write-up y una prueba de concepto de escalada local de privilegios de una vulnerabilidad de lectura y escritura OOB en el kernel de Linux. Puedes encontrar el write-up de esta vulnerabilidad en mi blog y también puedes encontrar mi introducción a nftables aquí. Una nota important...

6.6CVSS6.9AI score0.01467EPSS
SaveExploits10References3
Kitploit
Kitploit
added 2026/09/12 10:26 a.m.10 views

CVE-2021-30632

From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 El análisis de este error se puede encontrar aquí. Este es un error de Chrome reportado por un investigador anónimo y se cree que fue explotado en la naturaleza. El exploit aquí presentado se probó en ...

8.8CVSS7.8AI score0.6319EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/12 5:56 a.m.8 views

weightBufs

WeightBufs: WeightBufs es un exploit de lectura/escritura del kernel para todos los dispositivos Apple con soporte de Neural Engine. Errores y exploit por @simo36; puedes leer mis diapositivas de la presentación en POC para más detalles sobre las vulnerabilidades y las técnicas de explotación. El...

10CVSS7.5AI score0.0465EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-89720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ubifs: fix out-of-bounds read in signature length check ubifssbverifysignature bounds the on-disk ubifssignode-len field before handing the signature payload to...

7.7CVSS0.00182EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-89583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: eir: Fix OOB read in eirgetservicedata eirgetservicedata walks the advertising data for a Service Data field with a matching UUID. On a mismatch it...

8.1CVSS0.00255EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-89633

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 coalescet2 computes data pointers directly from server-supplied DataOffset fields wit...

9.8CVSS0.00481EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-89634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd smb/client: fix possible infinite loop and oob read in...

9.1CVSS0.00653EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/12 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-89614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: bound the free-cluster bitmap scan to the volume vol-lcnemptybitsperpage is sized from vol-nrclusters at mount, but ntfsclusteralloc bounds its scan of th...

9.8CVSS0.00407EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/11 8:19 p.m.8 views

CVE-2026-89705

In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rqstatuscounter to even on all nfsddispatch exit paths nfsddispatch sets rqstatuscounter to an odd value once a request has been decoded, and back to an even value once it has been fully processed, forming a seq-loc...

7.1CVSS0.0015EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

DEBIAN-CVE-2026-89691

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4releasecompoundargs resets args-ops to the inline iops8 array when the dynamically-allocated ops buffer is freed, but leaves args-opcnt at its original value whic...

7.1CVSS0.00125EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.8 views

CVE-2026-89691

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to prevent OOB read nfsd4releasecompoundargs resets args-ops to the inline iops8 array when the dynamically-allocated ops buffer is freed, but leaves args-opcnt at its original value whic...

7.1CVSS0.00125EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/11 8:19 p.m.9 views

CVE-2026-89633

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 coalescet2 computes data pointers directly from server-supplied DataOffset fields with no validation against buffer bounds: dataareaoftgt = char...

9.8CVSS0.00481EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 8:19 p.m.5 views

AZL-100644 CVE-2026-89621 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221rawevent mcp2221rawevent never validates the size of incoming HID reports. In the MCP2221I2CGETDATA path it trusts the device-supplied data3 as the copy length without checking that 4 ...

0.00209EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:19 p.m.5 views

DEBIAN-CVE-2026-89583

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eirgetservicedata eirgetservicedata walks the advertising data for a Service Data field with a matching UUID. On a mismatch it advances: eir += dlen; eirlen -= dlen; eirgetdata reports dlen as the...

8.1CVSS0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:19 p.m.5 views

AZL-100524 CVE-2026-89583 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix OOB read in eirgetservicedata eirgetservicedata walks the advertising data for a Service Data field with a matching UUID. On a mismatch it advances: eir += dlen; eirlen -= dlen; eirgetdata reports dlen as the...

8.1CVSS0.00255EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

DEBIAN-CVE-2026-89573

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's arrayblockcheck can only compare the header against itself, so a block with valuesize 4 and maxentries 1018 is internally consistent and passes. dm-cache keeps...

7.8CVSS0.00128EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89571

In the Linux kernel, the following vulnerability has been resolved: cxl/features: bound fwctl command payload to the input buffer fwctlcmdrpc copies cmd-inlen bytes into inbuf = kvzalloccmd-inlen and passes inbuf and inlen to -fwrpc. The CXL callback cxlctlfwrpc ignores inlen and never checks the...

7.1CVSS0.00124EPSS
SaveExploits0References3
NVD
NVD
added 2026/09/11 8:19 p.m.8 views

CVE-2026-89541

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gssunwrapresppriv length checks gssunwrapresppriv validates the RPCSECGSS opaque length with offset = u8 p - u8 head-iovbase; if offset + opaquelen rcvbuf-len goto unwrapfailed; majstat = gssunwrapctx-gcgssctx,...

9.8CVSS0.00463EPSS
SaveExploits0References4
Rows per page
Query Builder