85 matches found
EternalBlue-Exploit-Demonstration
EternalBlue 익스플로잇 데모 MS17-010 CVE-2017-0144 EternalBlue를 Metasploit을 사용하여 취약한 Windows 7 시스템에서 익스플로잇하고 Meterpreter를 통해 SYSTEM 수준 접근을 달성하는 사이버 보안 실습입니다. 이 프로젝트는 또한 WannaCry 스타일의 랜섬웨어 공격안전 데모을 시뮬레이션하고 MS17-010 보안 패치를 사용한 완화 방법을 보여줍니다. 모듈 정보 모듈: CSCM828 보안 취약점 및 침투 테스팅 학생: Daniel Nicolas Rentapalli...
EternalBlue-Exploit-Demonstration-MS17-010
Демонстрация эксплойта EternalBlue MS17-010 Лабораторная работа по кибербезопасности, демонстрирующая эксплуатацию уязвимости CVE-2017-0144 EternalBlue с помощью Metasploit на уязвимой системе Windows 7 с получением доступа уровня SYSTEM через Meterpreter. Этот проект также симулирует атаку...
CVE-2026-15419
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...
CVE-2026-15419
The silabser.sys driver for Silicon Labs CP210x devices (v11.5.0 and earlier) is vulnerable to kernel pool memory corruption caused by malformed packets from a malicious device. A local unprivileged user with physical access can trigger the flaw to achieve arbitrary code execution with escalated ...
PT-2026-89510
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges...
Improper Input Validation
nanoid is vulnerable to Improper Input Validation. The vulnerability is due to improper coercion of the user-influenced size parameter to a signed 32-bit integer, which allows an attacker to corrupt the process-wide CSPRNG pool and cause subsequent tokens and unique identifiers to become...
CVE-2026-14366
The Silicon Labs SiWx917 WiFi driver's transmit callback siwx91xsend in drivers/wifi/siwx91x/siwx91xwifi.c frees a network packet it does not own. In the Zephyr TX path the netpkt is owned by the L2/networking stack; the driver only borrows it to copy the frame bytes into a local netbuf. Before t...
CVE-2026-14366
CVE-2026-14366 affects the Silicon Labs SiWx917 WiFi driver in the Zephyr RTOS. The transmit callback siwx91x_send() in drivers/wifi/siwx91x/siwx91x_wifi.c calls net_pkt_unref() on a packet owned by the caller (ethernet_send() in subsys/net/l2/ethernet/ethernet.c), causing a use-after-free and do...
PT-2026-83897
Name of the Vulnerable Software and Affected Versions Silicon Labs SiWx917 WiFi driver affected versions not specified Description The transmit callback function siwx91x send in the WiFi driver incorrectly releases a network packet owned by the L2 networking stack. This occurs when the CONFIG WIF...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the fillPool logic in index.js and index.cjs. An attacker can make subsequent ID generation deterministic by supplying an oversized size value to nanoidsize, which is coerced into a negative 32-bit...
Linux Distros Unpatched Vulnerability : CVE-2026-73086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoidsize function in index.js and...
CVE-2026-11894
The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...
CVE-2026-11893
The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x, btbflbsend in drivers/bluetooth/hci/hcibflb.c, violates the bthcidriverapi.send buffer-ownership contract. That contract documented at include/zephyr/drivers/bluetooth.h requires the buffer reference to be consum...
CVE-2026-11894 Double-free / use-after-free in Realtek BEE Bluetooth HCI driver `send()` error paths
The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...
EUVD-2026-55937
The Realtek BEE Bluetooth HCI driver's send callback, bthcibeesend in drivers/bluetooth/hci/hcibee.c, violated the bthcidriverapi buffer-ownership contract. That contract requires the driver to consume unref the transmit netbuf only on success; on an error return the host caller retains ownership...
CVE-2026-11893
The CVE concerns Bouffalo Lab on‑chip BLE controllers (BL60x/BL70x/BL61x) with Zephyr’s Bluetooth HCI, where bt_bflb_send() in hci_bflb.c violates the bt_hci_driver_api.send() buffer-ownership contract. On error, the driver unrefs the buffer, but the host TX path (send_buf() in subsys/bluetooth/h...
CVE-2026-11893 Double free / use-after-free in Bouffalo Lab HCI driver send() error paths (hci_bflb)
The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers BL60x/BL70x/BL61x, btbflbsend in drivers/bluetooth/hci/hcibflb.c, violates the bthcidriverapi.send buffer-ownership contract. That contract documented at include/zephyr/drivers/bluetooth.h requires the buffer reference to be consum...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the emacdispatchskbzc function in the icssg-prueth driver failing to copy XDP buffer data to a new skb,...
CVE-2019-11490
An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcapsendqueuequeue or pcapsendqueuetransmit results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges...