CVE-2021-28476

CVE-2021-28476：vmswitch.sys 中的“Microsoft Hyper-V 远程代码执行漏洞” 这是 CVE-2021-28476（“Hyper-V 远程代码执行漏洞”）的概念验证，该漏洞是 vmswitch.sys（ 网络虚拟化服务提供程序 ）中的任意内存读取问题，微软于 2021 年 5 月进行了修补。 该漏洞由 @australeo、@ergot86、@peleghd 和 @OphirHarpaz 发现。客户虚拟机通过 VMBus（一种 用于分区间通信的基于通道的通信机制 ）发送恶意 RNDIS 数据包即可触发该漏洞。 以下是主机 系统在调试器中崩溃时的样子：...

CVE-2026-36358

CVE-2026-36358 PoC - Juzaweb CMS v.5.0.0 （XSS） Primero, configura la plataforma normalmente y registra una cuenta. Aquí, la cuenta de administrador que registré es [email protected] / 123456. Después de configurar la plataforma, puedes ver la página de inicio del sitio web. Accede a /admin e...

0vercl0k

0vercl0k PoC para CVE-2021-28476, una "vulnerabilidad de ejecución remota de código" de invitado a host en vmswitch.sys...

CVE-2021-28476

CVE-2021-28476: Desreferencia de puntero arbitrario en Hyper-V vmswitch.sys desde una VM invitada Resumen: Una máquina virtual invitada de Hyper-V puede desencadenar una condición de Denegación de Servicio en su host subyacente debido al análisis inseguro de entrada por parte de la función...

CVE-2021-28476-tools-env

pack test y exploitdev para el POC CVE-2021-28476 del investigador de bluefrostsecurity guía de instalación: cd tools/ ./addtopathtools.sh addition tools for /usr/bin/ remove tools from /usr/bin: cd tools/ ./deltopathtools.sh tools: pocinit: descripción: preinicializa el entorno del host invitado...

DASICS-CVE-2021-3156

DASICS CVE-2021-3156 版本要求 sudo：1.8.31 glibc：2.31 Linux：4.18 或 5.10.167-gee203559bc0b-dirty 使用方法 为了方便，在编译 Linux 时，不能使用 initramfs 方式，而使用本仓库中提供的 rootfs.img 作为根目录启动，内部包含了支持 sudo 以及 nss 服务正常工作的必要配置文件，是一个极其简单的发行版。 利用 DASICSQEMU 提供的 qemu 以 rootfs.img 为根目录启动 bbl。此外，也可以利用 OpenSBI 启动 linux。示例命令如下： !/bin/sh...

AtomicMemory

参考 FPGA 实现 Cyclone V 本目录包含参考 RTL 模块、预编译的 FPGA 镜像以及可选的 TCL 测试脚本，用于实现原子测量–塌缩原语。该原语是一种 CMOS 兼容的硬件测量–塌缩机制，强制实现单次读取语义：第一次合格的读取返回存储的字节，而测量行为会确定性地触发不可逆的塌缩事件。塌缩后，单元仅产生混淆或基于 PRNG 的输出，确保原始值无法恢复。该实现展示了确定性首次读取披露、基于基态条件的访问控制以及独立存储单元组上的原子单向状态转换。 提供的 .sof 文件允许直接进行硬件验证，无需任何额外的总线接口模块。 状态： 研究工件发布 许可证：...

openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V

A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side...

openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V

A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side...

CVE-2026-54875

A flaw was found in OpenSSL. The optimized scalar point multiplication used for SM2 cryptographic operations on ARM64 and RISC-V architectures does not execute in constant time. An attacker capable of measuring execution times or observing processor cache-access patterns can exploit this side...

AZL-105582 CVE-2026-54875 affecting package openssl 3.3.7-6

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

ALPINE-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105516 CVE-2026-54875 affecting package kata-containers 4.1.0.kata0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

DEBIAN-CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105840 CVE-2026-54875 affecting package rust 1.75.0-31

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105453 CVE-2026-54875 affecting package cloud-hypervisor 52.0.152-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105624 CVE-2026-54875 affecting package openvmm 0.1.0-1

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

AZL-105888 CVE-2026-54875 affecting package rust 1.96.1-2

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...

CVE-2026-54875

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption ...