Windows-CVE-2024-38063

Windows-TCP/IP-IPv6 CVE-2024-38063 Уязвимость CVE-2024-38063 — это уязвимость удалённого выполнения кода в компоненте TCP/IP операционной системы Windows. Согласно официальной информации Microsoft, данная уязвимость имеет наивысший уровень серьезности, оценка CVSS — 9.8. Под её воздействием...

My-CVEs

Список уязвимостей, которые я нашел. Некоторые уязвимости сопровождаются подробными техническими отчетами, эксплойтами или даже описаниями сессий фаззинга. Некоторые уязвимости не имеют CVE, потому что мейнтейнеры перестали отвечать, или потому что мейнтейнер не согласился, что это ошибка...

fluffi

FLUFFI FLUFFI - распределённый эволюционный бинарный фаззер для пентестеров. О проекте Общий обзор Учебник для начинающих Начало работы Использование HOWTO Технические детали Вклад в FLUFFI ЛИЦЕНЗИЯ Найденные баги На данный момент FLUFFI использовался почти исключительно на продуктах и решениях...

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

CVE-2026-42980-POC

CVE-2026-42980 공개 공개 이 저장소는 CVE-2026-42980 에 대한 공개 공개 자료를 포함하고 있습니다. 이는 취약한 실험실 빌드에서 NT AUTHORITY\SYSTEM으로의 로컬 권한 상승에 악용될 수 있는 Windows 커널 WMI 정수 언더플로 취약점입니다. 전체 글 영문 기사 스페인어 기사 저장소 구조 root@kitploit: public/ README.md README.es.md writeup-en.md writeup-es.md build.ps1 Makefile src/ cve202642980lpe...

CVE-2022-0185-Case-Study

CVE-2022-0185 案例研究 本案例研究是ECE 9069课程“黑客入门”的一个作业成果：https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 概述 CVE-2022-0185 是一个基于堆的缓冲区溢出漏洞，存在于 Linux 内核文件系统上下文（Filesystem Context）功能中的 legacyparseparam 函数验证所提供的参数长度的方式中。一个非特权本地用户（如果启用了非特权用户命名空间，则不需要；否则需要命名空间的 CAPSYSADMIN 权限），能够打开一个不支持文件系统上下文...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Ошибка Sudo позволяет ограниченным пользователям выполнять команды от root ДЕМОНСТРАЦИЯ УЯЗВИМОСТИ Добавьте нового пользователя: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // добавьте пароль для пользователя visudo Добавьте новую запись test...

CVE_2025_24257----NOT-MINE

🔧 CVE202524257----NOT-MINE - Запуск Windows PoC безопасно 🧾 Обзор CVE202524257----NOT-MINE — это proof of concept для Windows, который демонстрирует ошибку памяти ядра в IOGPUFamily. Он основан на переполнении bitmapmask, которое может привести к выходу за границы кучи ядра. Этот проект является...

SdoKeyCrypt-sys-local-privilege-elevation

SdoKeyCrypt.sys - Vulnerabilidad de Elevación de Privilegios Local 1. ¿Qué es SdoKeyCrypt.sys? SdoKeyCrypt.sys es un controlador de protección de teclado para un MMORPG, también conocido como Massively-Multiplayer-Online-Role-Playing-Game, llamado MapleStory Online, publicado por Shanda Group en...

CVE-2026-89640

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When performing a file range remapping operation with a zero length, an integer underflow can occur if the offset exceeds the file size. This can lead to corruption of the byte count in file system control...

Linux Distros Unpatched Vulnerability : CVE-2026-81000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: tun: bound receive headroom tungetuser uses tun-align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an...

CVE-2026-89532

A flaw was found in the Linux kernel's svcrdma component. A remote attacker could send a specially crafted network packet that causes an integer underflow in the pclforeachsegment function when processing a chunk with zero segments. This vulnerability leads to an out-of-bounds read, resulting in ...

CVE-2026-89551

A flaw was found in the Linux kernel's SUNRPC subsystem, specifically within the xdrbuftrim function. This vulnerability occurs when xdrbuftrim attempts to reduce the size of an XDR buffer. If the buffer's length is smaller than the amount being trimmed, an integer underflow can occur, causing th...

CVE-2026-89688

A flaw was found in the Linux kernel's nfsd component. During a seqidop replay retry, the system incorrectly handles reference counts for stateowners, leading to a reference count underflow and a use-after-free vulnerability. This issue could allow an attacker to potentially cause a denial of...

CVE-2026-89524

A flaw was found in the ath6kl Wi-Fi driver of the Linux kernel. An integer underflow vulnerability occurs when processing Wi-Fi association requests or responses that are shorter than expected. This can cause the system to read beyond the intended buffer, leading to the disclosure of adjacent...

CVE-2026-89526

A flaw was found in the svcrdma component of the Linux kernel. A remote attacker can exploit this vulnerability by supplying a crafted RPC/RDMA Read chunk position field that is not properly validated against the received inline body length. This can lead to an underflow, exposing adjacent slab...

CVE-2026-89606

A flaw was found in ecryptfs, a component of the Linux kernel. This vulnerability allows a remote attacker to send a specially crafted tag 70 packet with a body smaller than expected. This can lead to an integer underflow during size calculation, potentially causing a denial of service DoS or...

CVE-2026-85769

CVE-2026-85769 libtpms TPM 2.0 휘발성 상태 역직렬화에서의 힙 범위 밖 읽기Heap out-of-bounds read. blockskipread의 무제한 선택적 블록 건너뛰기가 언마샬unmarshal 커서를 공격자가 제어하는 16비트 길이만큼 전진시키고, 부호 있는 남은 크기 카운터를 음수로 만듭니다. 이후 모든 다운스트림 경계 검사는 그 부호 있는 값을 부호 없는 값으로 캐스팅하기 때문에 모두 통과합니다. 위조되고 자체 체크섬이 적용된 휘발성 상태 블롭blob이...

CVE-2026-81000

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

CVE-2026-89631

A flaw was found in the Linux kernel's Server Message Block SMB client. A remote malicious SMB server could send a specially crafted tree connect response with a byte count that is too small. This incorrect handling can lead to an integer underflow, causing the client to read beyond an allocated...