Kernel-Exploits

Kernel Exploits Repository for kernel exploits...

KernelCare : Live Kernel Patching

KernelCare is being used to maintain the remote host's operating system kernel without requiring reboots. %NASLMINLEVEL 80900 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid286277; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2025-53136 NT OS Kernel Information Disclosure Vulnerability

...

kernel: xfs: don't walk off the end of a directory data block

A vulnerability was found in the Linux kernel in the xfsdir2dataunused and xfsdir2dataentry functions where a lack of proper sanity checks while handling directory data blocks can lead to out-of-bounds memory access. This can result in undefined system behavior or crashes...

iPadOS tvOS iOS watchOS macOS DoS

The vulnerability of the kernel in iPadOS, tvOS, iOS, watchOS, and macOS is caused by an overflow in the stack buffer. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects...

Oracle Linux 5 : kernel (ELSA-2018-4219)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4219 advisory. 2.6.18-419.0.0.0.11 - x8664/entry: Don't use IST entry for BP stack orabug 28452062 CVE-2018-8897 Tenable has extracted the preceding description block directly...

FreeRTOS Stream Buffer Overflow RCE

The vulnerability of the streambuffer.c component in the real-time operating system FreeRTOS is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Oracle Sun Data Modification

The vulnerability of the Oracle Sun operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...

Mac OS X Kernel Memory Disclosure DoS

The vulnerability of the Mac OS X operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory or cause a service failure through a...

Mac OS X iOS Code Execution

The vulnerability of the kernel in Mac OS X and iOS lies in errors during the initialization of undefined data structures. Exploiting this vulnerability allows an attacker to execute arbitrary code by manipulating network connections remotely...

Using Kernel Exploits to Bypass Sandboxes for Fun and Profit

Researchers and attackers alike are quickly discovering you don’t need a fancy Java or Flash exploit to beat application sandboxes. Exploiting an unpatched kernel vulnerability in the underlying operating system, one that’s likely to stay unpatched for a long time, will do just fine. Twice this...

Cisco VPN Client Denial of Service Vulnerability

Cisco VPN Client contains a vulnerability that could allow an authenticated, local attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to improper interaction between the VPN driver and the operating system kernel on a device running the vulnerable...

Sun xVM VirtualBox 1.6.4 - Privilege Escalation (PoC)

Sun xVM VirtualBox 1.6.4 - Privilege Escalation PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Sun xVM VirtualBox Privilege Escalation Vulnerability Advisory Information Title: Sun xVM VirtualBox Privilege...