2393 matches found
CVE-2026-80982
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smcrxpipebufrelease smcrxsplice hands RMB pages to a pipe and takes a socket reference per entry so the smcsock stays alive until the reader finishes. The connection does not: a concurrent close run...
bedaisy-bypass
bedaisy-bypass Description bedaisy-bypass is a kernel driver designed to bypass reports sent from BEDaisy.sys to BEService.exe. For users not on a UEFI, the project utilizes Infinity Hook. The driver intercepts data communicated through the named pipe between the two services. On receiving a...
CVE-2022-0847
CVE-2022-0847 Reproducción simple de CVE-2022-0847 Dirección del artículo original del divulgador: https://dirtypipe.cm4all.com/ Entorno de reproducción root@kitploit: Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencias root@kitploit: gcc Pasos de uso...
CVE-2022-0847
CVE-2022-0847 Reproducción simple de CVE-2022-0847 Dirección del artículo original del divulgador: https://dirtypipe.cm4all.com/ Entorno de reproducción root@kitploit: Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencias root@kitploit: gcc Pasos de uso...
Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847
root@kitploit: Chrono-Drip: Temporal Viscosity Exploitation Framework CVE-2022-0847 Weaponization via Convergent Time Theory CTT ⚠️ DISCLAIMER FOR RESEARCH AND ACADEMIC PURPOSES ONLY This tool demonstrates the application of fundamental physics discoveries to cybersecurity. All work presented here...
PT-2026-90463
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace pipe read on sub-buffer order change Writing to buffer subbuf size kb calls ring buffer subbuf order set, which frees every sub-buffer of the ring buffer, including the reader page, and replac...
PT-2026-90112
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc rx pipe buf release smc rx splice hands RMB pages to a pipe and takes a socket reference per entry so the smc sock stays alive until the reader finishes. The connection does not: a concurrent...
DirtyPipe-Exploit
CSE 5380: Trabajo de Seguridad de la Información CVE-2022-0847 Dirty Pipe Por Karan Vasudevamurthy UTA ID: 1002164438 ¿Qué es CVE? Common Vulnerabilities and Exposures CVE es una lista de vulnerabilidades y exposiciones de seguridad de la información divulgadas públicamente. La corporación MITRE...
dirtypipe-container-breakout-poc
Dirty Pipe Container Escape Moved to https://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/dirtypipe-container-breakout...
CVE-2022-0847
CVE-2022-0847 - Dirty Pipe Exploit A proof-of-concept exploit for CVE-2022-0847 Dirty Pipe, a Linux kernel vulnerability that allows unprivileged users to write to read-only files. Vulnerability Details CVE-2022-0847 affects Linux kernels 5.8 through 5.16. It exploits a race condition in the Linu...
CVE-2026-9490
CVE ID: CVE-2026-9490 研究者: Vo Duc Thang ugvxb 致谢: https://community.acer.com/en/kb/articles/19668 1. 执行摘要 在 Acer Care Center 服务(ACCSvc.exe)中发现了一个严重的安全漏洞。该漏洞允许任何经过身份验证的本地用户使系统服务崩溃(拒绝服务),并可能通过一个安全保护薄弱的命名管道接口提升权限。 该服务以 SYSTEM 权限(LocalSystem)运行,暴露出一个命名管道,其访问控制过于宽松,向所有经过身份验证的用户授予了读、写和执行权限。 2. 漏洞详情 2.1...
ysoserial-modified
ysoserial-modified Thats a fork of the original ysoserial application that can be found here: https://github.com/frohoff/ysoserial Description of the Modification Due how Runtime.getRuntime.execString.class works in java, nested and complex commands where you'll need control pipes or send the...
Linux Distros Unpatched Vulnerability : CVE-2026-80915
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe: Fix DPT allocation paths. Remove the fallback for VRAM to system memory, I tested it and that doesn't work at all, only a black screen with pipe fault...
CVE-2026-67401
cve-id Donate...
CVE-2026-80915
CVE-2026-80915 affects the Linux kernel drm/xe driver (Intel Xe GPU). The vulnerability is in DPT (Display Plane Table) allocation paths , where an incorrect fallback from VRAM to system memory produces a black screen with pipe fault errors , and use of stolen memory on media GT systems introduce...
CVE-2026-9789
CVE ID: CVE-2026-9789 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19670 Video POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. Executive Summary A critical local privilege escalation vulnerability has been...
CVE-2022-0847-Dirty-Pipe-
CVE-2022-0847-Dirty-Pipe- este es un repositorio que enfrenta un problema de escalación en su sistema Linux y una noticia respecto al problema de "Dirty pipeline" Max Kellermann, desarrollador de CM4all una empresa alemana de hosting web, lo encontró a principios de 2022, pero no buscando...
CVE-2022-0847-DirtyPipe-Exploit
A vulnerability was found in Linux Kernel up to 5.10.101/5.15.24/5.16.10 Operating System and classified as critical. This issue affects some unknown processing of the component Pipe Handler. Impacted is confidentiality, integrity, and availability. The weakness was presented 03/08/2022. The...
CVE-2012-2982
CVE-2012-2982 Description file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | pipe character. Installation 1. git clone https://github.com/CpyRe/CVE-2012-2982.git 2. pip3 install -...
CVE-2020-11492
CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020. This PoC performs the following: creates a named pipe mimicking docker named pipe \.\pipe\dockerLifecycleServer, call...