CVE-2026-53089 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

CVE-2026-53401 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-998C-5H7Q-5RRG vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

GHSA-H8P2-7W9Q-6G4F vulnerabilities

Vulnerabilities for packages: linux-desktop, linux-qemu-melange...

CVE-2026-64210 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange...

RHEL 9 : Red Hat OpenStack Platform 17.1 security advisory (Important) (RHSA-2026:66401)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66401 advisory. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service...

specterops-k8s-red-teamers-libvirt-patch

Parche Libvirt de SpecterOps Kubernetes para Red Teamers Un parche no oficial de libvirt y QEMU/KVM para el curso gratuito Kubernetes for Red Teamers de SpecterOps. Las direcciones de red originales, la topología de Kubernetes, los callbacks de Mythic y el comportamiento del laboratorio permanece...

qemu

QEMU 自述文件 QEMU 是一个通用且开源的全机器与用户空间模拟器及虚拟化器。 QEMU 能够在不依赖硬件虚拟化支持的情况下，通过软件模拟完整机器。借助动态翻译技术，它能获得非常好的性能。QEMU 还可以与 Xen 和 KVM 虚拟机监控器集成，在提供模拟硬件的同时，让虚拟机监控器管理 CPU。借助虚拟机监控器支持，QEMU 可以在 CPU 方面达到接近原生的性能。当 QEMU 直接模拟 CPU 时，它能够在一台机器（例如 x8664 PC 主板）上运行专为另一台机器（例如 ARMv7 开发板）设计的操作系统。 QEMU 还能够为 Linux 和 BSD 内核接口提供用户空间 API...

CVE-2017-13672

CVE-2017-13672 PoCs para CVE-2017-13672 lectura fuera de límites en el controlador VGA Cirrus de QEMU, causando denegación de servicio...

cve-2015-3456

Experimentos relacionados con CVE-2015-3456 Hay: exploit/ es un "exploit" solo hace fallar a QEMU. mock/ contiene una versión reducida de QEMU. Solo queda la vulnerabilidad. patch/ contiene un programa para parchear una instancia en ejecución de QEMU. El punto principal es no necesitar símbolos d...

DEBIAN-CVE-2026-62437

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

Linux Distros Unpatched Vulnerability : CVE-2026-62437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated remova...

CVE-2026-52943

如何使用本仓库 这是一个针对 skbuff.c 中 use-after-free 漏洞的 Linux 内核本地权限提升 PoC 代码：https://github.com/torvalds/linux/commit/98d0912e9f841e5529a5b89a972805f34cb1c69d vidieo1.webm 这里是 writeup 链接：https://hackmd.io/@mlc0cVjxSwqv0OoxsUYccw/Bk99YYTyzx 你需要开启 cloudfare warp 或 VPN 才能查看 writeup...

lehack-2026-challenge

LeHack 2026 Challenge A 3-tier challenge demonstrating impact of direct disk mounting. Challenge Overview Level| Goal| Technique ---|---|--- 1| Access the unencrypted disk| Set boot cmdline to init=/bin/bash in grub 2| Crack vault1 LUKS| Extract header → hashcat → unlock & mount vault 3| Crack...

vUSBf

vusbf-Framework root@kitploit: / / / / / / / / // | | / / / / / / / / / / / / / /\ / | | |/ / / / / // // / // / / / // // / // / |/ /,/,// //// / / / // / / / // // / / / / / // / / / // // / / // ,/ ///// A KVM/QEMU based USB-fuzzing framework. Sergej Schumilo, OpenSource Security...

CVE-2023-20938-Public

README 本仓库包含一个 用于 CVE-2023-20938 的漏洞触发器 ，旨在演示和研究该漏洞的行为。 QEMU 模拟 ：用于在 QEMU 下复现问题的漏洞触发器位于 libdevbinder/ 目录中。 真实设备 ：用于在真实 Android 设备上执行的漏洞触发器位于 src/ 目录中。 此代码严格仅供教育和安全研究目的 使用，例如漏洞分析、复现以及理解利用机制。不得滥用或在生产环境中部署 。...

cve-2022-46395-qemu

Laboratorio QEMU r36p0 para CVE-2022-46395 Este repositorio contiene un laboratorio QEMU/no-Mali para reproducir la condición desencadenante portable de CVE-2022-46395 contra la familia de controladores Arm Mali r36p0. El laboratorio está pensado para investigación local de vulnerabilidades y...

S-V-Project-Implementation-of-CVE-2015-3256

CVE-2015-3456 VENOM: PoC de caída de QEMU y análisis Este repositorio contiene una prueba de concepto reproducible de caída/DoS para CVE-2015-3456 "VENOM" usando una versión vulnerable de QEMU v2.3.0. El proyecto demuestra: Escrituras controladas por el invitado en el controlador virtual de...

Oracle Linux 9 : qemu-kvm (ELSA-2026-500245)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500245 advisory. - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...