triton-cve-2025-23320

演示 CVE-2025-23320 本仓库复现了 CVE-2025-23320，演示 CWE-209（生成包含敏感信息的错误消息）（CVSS 评分：7.5）。该漏洞存在于所有 NVIDIA Triton 推理服务器 25.06 及更早版本中。 此 Docker 环境运行一个包含 NVIDIA Triton 推理服务器和攻击客户端的网络。该环境还确保客户端在 Linux 上运行，因此该 CVE 可在所有操作系统上复现。 构建/运行 docker compose --build-no-cache 如果是首次运行，这可能需要一段时间，因为会从 GitHub 拉取 NVIDIA Triton 服...

nanoclaw

エージェントを専用コンテナで安全に実行するAIアシスタント。軽量で、理解しやすく、あなたのニーズに完全にカスタマイズできるように設計されています。 nanoclaw.dev • ドキュメント • English • 中文 • 한국어 • • NanoClawを作った理由...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Inter Process Communication through shared memory is a concept where two or more process can access the common memory. And communication is done via this shared memory where changes made by one process can be viewed by another process. The kern...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 This is an exploit for CVE-2017-7047, a logic error in libxpc which allowed malicious message senders to send xpcdata objects that were backed by shared memory. Consumers of xpc messages did not seem to expect th...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78961

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

CVE-2026-56907 affects the VPU (Video Processing Unit) component in Google Pixel devices, as tracked in the Pixel security bulletin of 2026-09-01 and OSV entry PUB-A-510463247 . The root cause is a shared memory overwrite due to improper input validation , which can lead to local privilege escala...

GreenSection

GreenSection Nvidia GreenSection 内存损坏 0day 漏洞 多个 NVIDIA 用户模式组件在 \BaseNamedObjects\52813408-3561-4705-820a-2b3b78be92ba 中共享一个全局内存段，所有用户对该段均拥有完全读写权限。该段内部存储了重要的数据结构，但在执行时会进行检查以防止出现问题。 不幸的是，该段中的相同数据在运行时被重复使用，导致越界内存写入。 虽然此漏洞不会立即获得 SYSTEM 权限，但它可以轻松地跨用户边界使用，甚至可能危及 dwm.exe...

Astra Linux – Vulnerability in PHP 7.3

In PHP versions 7.3.x up to and including 7.3.31, 7.4.x below 7.4.25, and 8.0.x below 8.0.12, when running PHP FPM SAPI with the main FPM daemon process running as the root user and child worker processes running as lower-privileged users, it is possible for the child processes to access memory...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipc: fixed to protect IPCS lookups using RCU. syzbot reported that it discovered a use-after-free vulnerability. 0 0: https://lore.kernel.org/all/[email protected]/ idrforeach is protected by rwsem, but...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free exists in the drivers/tee/teeshm.c file within the TEE subsystem of the Linux kernel, as of version 5.15.11. This issue arises due to a race condition during the teeshmgetfromid function, when attempting to free a shared memory object...

kernel: drm/i915: Fix potential overflow of shmem scatterlist length

A flaw was found in the Linux kernel's graphics memory management drm/i915 component. This vulnerability occurs when a large shared memory object's internal list of memory segments, called a scatterlist, is populated. If the total size of these segments exceeds 4 Gigabytes GB, a numerical overflo...

CVE-2026-33957

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custosiwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage...

CVE-2026-33957

An out-of-bounds read/write vulnerability exists in the CustOS Driver of the Samsung Mobile Processor Exynos 1580 . Requesting oversized shared memory from the custos_iwc device triggers the flaw, potentially leading to memory corruption or information leakage . The CVSS 3.1 score is 4.2 (MEDIUM)...

PT-2026-91012

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos iwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage...

CVE-2026-33957

An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custosiwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage...

The vulnerability of the shm_trydestroy_orphaned() function in the ipc/shm.c module of the interprocess communication subsystem of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the shmtrydestroyorphaned function in the ipc/shm.c module of the Linux kernel’s interprocess communication subsystem is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service...

PUB-A-510463247

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58094

The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been configured without holding t...