perf-exploiter

perf-exploiter CVE-2014-2630 在我们最近的一次渗透测试中，我们利用了一个影响名为“xglance-bin”的 suid 二进制文件的漏洞。作为 HP Performance Monitoring 解决方案 的一部分，它使我们能够在一些 Linux RHEL 7.x/8.x 系统上将本地非特权会话提升至 root 权限。老实说，这并不是我们第一次利用这个特定漏洞，自 2014 年以来，我们已在许多安装了 RHEL 的 HP 服务器上频繁滥用该漏洞。 该漏洞确实有一个已注册的 CVE 编号（CVE-2014-2630），最初由 Portcullis 的 Tim...

libperf_event_exploit

此仓库已移至 https://github.com/android-rooting-tools/libperfeventexploit...

The vulnerability of FortiMonitorOnSight’s network performance monitoring and analysis solution lies in its ability to disclose information through source code. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of FortiMonitorOnSight’s network performance monitoring and analysis solution lies in the fact that it exposes information through source code. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86/pmu: Disabled support for adaptive PEBS. Support for virtualizing adaptive PEBS has been discontinued. This is because KVM’s implementation is architecturally broken without an obvious or easy way to address the issue...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: The mask PEBSENABLE must be loaded for guests with a specified vCPU value. When generating the MSRIA32PEBSENABLE value that will be loaded on the VM-Entry to a KVM guest, the value should be masked with the...

Astra Linux – Vulnerability in Linux

A flaw related to memory leaks in the Linux kernel’s performance monitoring subsystem was discovered due to the use of PERFEVENTIOCSETFILTER. A local user could exploit this flaw to deplete resources, resulting in a denial of service...

kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling

A vulnerability was found in the Linux Kernel. This issue affects performance monitoring on the s390 architecture during specific CPU hotplug scenarios...

kernel: s390/cpum_sf: Handle CPU hotplug remove during sampling

A vulnerability was found in the Linux Kernel. This issue affects performance monitoring on the s390 architecture during specific CPU hotplug scenarios...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: powerpc/perf: Fixed powerpmudisable to call clearpmiirqpending only if PMI is pending. Running a self-test with CONFIGPPCIRQSOFTMASKDEBUG enabled in the kernel triggered the following warning: 172.851380 ------------ Cut here...

CVE-2026-64556

A flaw was found in the Linux kernel's performance monitoring unit PMU subsystem. This vulnerability occurs when a performance event group leader is removed during process execution, but its associated events siblings remain active and linked to a stale list. This inconsistent state can lead to a...

EUVD-2026-50201

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during removeonexec perfeventremoveonexec removes events by calling perfeventexitevent. For top-level events, this removes the event from the context with DETACHEXIT only. This can leave inconsisten...

EUVD-2025-210523

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function 2 or the 'Find and configure a matching counter' function of SBI PMU extension...

CVE-2025-63913

An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function 2 or the 'Find and configure a matching counter' function of SBI PMU extension...

CVE-2025-63913

An issue was discovered in OpenSBI version 1.3 that allows attackers to cause a denial of service (DoS). The vulnerability is triggered by sending a crafted request to the SBI function #2 or the 'Find and configure a matching counter' function of the SBI PMU (Performance Monitoring Unit) extensio...

CVE-2026-53370

A flaw was found in the Linux kernel's performance monitoring unit perf/x86/intel related to the validation and configuration of Auto Counter Reload ACR masks. Incomplete validation of user-space ACR masks could lead to incorrect configurations. This issue could result in inaccurate performance...

Linux Distros Unpatched Vulnerability : CVE-2026-53370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are severa...

Kibana 8.x < 8.18.9 / 8.19.x < 8.19.6 / 9.0.x < 9.0.8 / 9.1.x < 9.1.6 Information Disclosure (ESA-2026-50)

The version of Kibana installed on the remote host is 8.x prior to 8.18.9, 8.19.x prior to 8.19.6, 9.0.x prior to 9.0.8, or 9.1.x prior to 9.1.6. It is, therefore, affected by an information disclosure vulnerability: - Insertion of Sensitive Information into Log File CWE-532 in Kibana can lead to...

CVE-2026-49088 Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure

Insertion of Sensitive Information into Log File CWE-532 in Kibana can lead to information disclosure. When the optional application performance monitoring APM instrumentation is enabled, sensitive request header values could be recorded in application logs, where they may be accessible to...

CVE-2026-49088 Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure

Insertion of Sensitive Information into Log File CWE-532 in Kibana can lead to information disclosure. When the optional application performance monitoring APM instrumentation is enabled, sensitive request header values could be recorded in application logs, where they may be accessible to...

CVE-2026-49088 Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure

Insertion of Sensitive Information into Log File CWE-532 in Kibana can lead to information disclosure. When the optional application performance monitoring APM instrumentation is enabled, sensitive request header values could be recorded in application logs, where they may be accessible to...