omae-wa-cheese-da

omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...

CVE-2025-32463-PoC

CVE-2025-32463 – Escalada de privilegios mediante sudo chroot 📝 Resumen CVE-2025-32463 es una vulnerabilidad local de escalada de privilegios que afecta a la utilidad sudo. Permite a un usuario normal escalar privilegios a root explotando la opción -R que establece un directorio raíz de ejecución...

CVE-2025-32463_chwoot

CVE-2025-32463sudochwoot Declaration: This script is only for security testing and should not be used for illegal purposes. CVE-2025-32463 sudochwoot privilege escalation vulnerability verification script Description Compared to other POCs available on the Internet, this script takes into account...

CVE-2026-100075

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters When srptallocrwctxs fails partway through a multi-buffer indirect descriptor, the unwind path destroys RDMA contexts but leaves stale nrwctx and nrdma values and a dangling rwctxs...

VulnLLM-R

VulnLLM-R: LLM de razonamiento especializado para la detección de vulnerabilidades Artículo: arXiv:2512.07533 Código y datos: GitHub Demo: Demo web Modelo: Modelo 7B Entorno y conjunto de datos 🛠️ Crear el entorno Instalar Git LFS y clonar el repositorio los archivos LFS se descargan...

CVE-2026-97938

In the Linux kernel, the following vulnerability has been resolved: reboot: fix cadpid use-after-free race cadpid is a single kernel-wide struct pid pointer. procdocadpid reads it and passes it to pidvnr without protecting the lifetime of the referenced struct pid. A concurrent writer can replace...

CVE-2025-66678

CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...

Advantech R-SeeNet 2.4.12 - OS Command Injection

Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering...

Advantech R-SeeNet - Cross-Site Scripting

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the deviceid parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. id: CVE-2021-21802 info: name: Advantech R-SeeNet - Cross-Site Scripting author:...

APsystems ECU-R Firmware - Command Injection

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter. id: CVE-2022-45699 info: name: APsystems ECU-R Firmware - Command Injection author: pussycat0x severity:...

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the sshform.php script functionality. id: CVE-2021-21800 info: name: Advantech R-SeeNet 2.4.12 - Cross-Site Scripting author: arafatansari severity: medium description: | Advantech R-SeeNet 2.4.12 contains a...

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the telnetform.php script functionality. id: CVE-2021-21799 info: name: Advantech R-SeeNet 2.4.12 - Cross-Site Scripting author: arafatansari severity: medium description: | Advantech R-SeeNet 2.4.12 contains a...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Stack-Based Buffer Overflow x86 and x64 Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The same vulnerability across two architectures, leading to different exploitation...

CVE-2026-97477

In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix numcounters leak on bindqp failure in allocandbind When rdmacounterbindqp fails in allocandbind, the error path jumps to errmode which frees the counter without decrementing portcounter-numcounters. The only pla...

CVE-2026-97421

In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ibumemfindbestpgsz Several corner cases, especially important on 32 bits: - umem-iova is u64, the function argument should pass in u64 or iova will be truncated - Check that the...

CVE-2026-97413

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-93277

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Validate udata before executing commands The destroy callbacks currently zero the udata output after tearing down driver resources. If the userspace access fails, uverbs preserves the uobject and allows the destroy...

CVE-2026-93267

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in uverbsfreedmah When accessing a dmah via the netlink path the only synchronization mechanism for the said dmah is rdmarestrackget. Currently, rdmarestrackdel is invoked at the end of...

CVE-2026-93264

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix PBL chunk length computation On register MR, when creating the PBL, if it's an indirect PBL we create a chunk list to hold the PBL pages pointers. Each chunk is 4KB in size and can hold 510 addresses EFAPTRSPERCHUNK...

CVE-2025-7771

CVE-2025-7771 — Lectura/Escritura Arbitraria de Memoria Física en ThrottleStop.sys Prueba de concepto completa para el controlador ThrottleStop.sys de TechPowerUp CVE-2025-7771. Un controlador de kernel firmado y aún cargable expone lectura y escritura de memoria física sin validación a través de...