CVE-2026-64561

CVE-2026-64561 — Zapscape: KVM/x86 shadow MMU UAF, guest escape to host root HackSpeak distribution mirror. This repository is a distribution mirror of the complete PoC + technical write-up publicly released by researcher Hyunwoo Kim @v4bel , with code and documentation identical to upstream. ⚠️...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html WebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It...

KVM-Januscape

KVM-XJ Hot Patch dumptool.py automatically finds offsets; how to use it? Just read the code. Vulnerability Overview CVE-2026-53359 Januscape is a use-after-free UAF vulnerability in the Linux kernel KVM shadow MMU. Lurking time : 16 years August 2010 to July 2026 Affected range : All Intel/AMD x8...

vmware-exploitation

VMware Exploitation A collection of links related to VMware escape exploits. Pull requests are welcome. Follow @andreyknvl on Twitter or @[email protected] on Mastodon to be notified of updates. Research 2024 "Chaining N-days to Compromise All": "Part 4 — VMware Workstation Information...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

CVE-2021-3656-Demo

CVE-2021-3656: This issue is caused by missing validation of the the virtext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS Virtual VMLOAD/VMSAVE for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and...

Hoverfly < 1.10.3 - Arbitrary File Read

Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The /api/v2/simulation POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary...

tandasat.github.io

System Programming Lab Our Training Our next public Hypervisor Development class is: Date: Oct 12 - 15, 2026 4 days Time: 8am - 4pm PDT/UTC-7 Format: Remote Register at RegFox If you want to receive future class schedule announcements, subscribe to our mailing list by sending an empty email to...

qemu-t8030

=========== QEMU README QEMU is a generic and open source machine & userspace emulator and virtualizer. QEMU is capable of emulating a complete machine in software without any need for hardware virtualization support. By using dynamic translation, it achieves very good performance. QEMU can also...

GoDefender

🛡️ GoDefender 🛡️ A powerful Go-based security toolkit designed to detect and defend against debugging, virtualization, and DLL injection attacks. GoDefender provides comprehensive protection mechanisms to make reverse engineering and analysis significantly more difficult. ⚠️ WINDOWS ONLY - Designed...

CVE-2026-79611

A flaw was found in Xen. A user inside a guest virtual machine can cause a Denial of Service DoS of that guest by enabling a specific combination of processor debugging and branch tracing states. Due to improper state handling during hardware virtualization transitions, the hypervisor triggers a...

CVE-2026-98720

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine nested virtualization implementation. This flaw allows an attacker within a nested guest to bypass isolation boundaries and directly access host hardware controls, potentially causing host system instability or a Denial of...

CVE-2026-98716

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for AMD processors SVM. During nested virtualization, KVM incorrectly checked whether Model-Specific Register MSR accesses were intercepted by referencing the wrong control structure's permission bitmap. A malicious...

Security Bulletin: Vulnerability in BIND (CVE-2025-13878) affects AIX/ VIOS.

Summary A remote attacker can send or trigger processing of malformed BRID/HHIT DNS resource records, causing the named daemon to terminate unexpectedly. Vulnerability Details CVEID:CVE-2025-13878 DESCRIPTION: Malformed BRID/HHIT records can cause named to terminate unexpectedly. This issue affec...

CVE-2026-98653

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem on s390 architectures. In nested virtualization environments, the kernel can erroneously pass an unhandled memory fault error to host userspace when shadowing nested guest memory pages that are not yet mapped. A gue...

Vulnerabilities are managed in Oracle Enterprise Manager

Oracle has identified several vulnerabilities in Oracle Enterprise Manager, including the Base Platform, Data Guard Management, Siebel, and Virtualization components. These vulnerabilities affect versions 13.5 and 24.1. The vulnerabilities in Oracle Enterprise Manager can lead to unauthorized...

CVE-2026-98639

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for the RISC-V architecture. During nested virtualization acceleration, control flags are written before the target page parameters are properly committed to shared memory. Consequently, the supervisor interface or...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (October 2026 - Part 1 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-88031 DESCRIPTION: Improper neutralization of special elements in data...

Security Bulletin: IBM Virtualization Engine TS7700 is susceptible to multiple vulnerabilities due to the use of IBM® SDK, Java™ Technology Edition

Summary IBM Virtualization Engine TS7700 is susceptible to information disclosure and data tampering CVE-2026-60147 and denial of service CVE-2026-16243 vulnerabilities due to the use of IBM SDK, Java Technology Edition, Version 8. TS7700 uses Java to provide the Management Interface. Vulnerabili...