#kernelexploit — Public Fediverse posts

New Linux kernel flaw gives attackers root access. Patch now to avoid compromise.
#LinuxSecurity #KernelExploit

A Windows 10 kernel off‑by‑one in the PagedPool allocator was showcased at WCTF 2018. By corrupting an I/O request packet the exploit gains arbitrary write in kernel space, opening the door to local privilege escalation or remote code execution. Microsoft patched it quickly, but the demo reminds us how subtle memory‑management bugs can break system trust.

#WindowsSecurity #KernelExploit #CTF #InfoSec #PatchTuesday

🔗 https://j00ru.vexillium.org/2018/07/exploiting-a-windows-10-pagedpool-off-by-one/

Critical Linux kernel vulnerability “Fragnesia” allows local users to gain root privileges without a race condition.

Researchers warn the exploit can corrupt cached binaries in memory, persist until reboot/cache flush, and already has a public PoC on GitHub.

Source: https://cybersecuritynews.com/fragnesia-linux-vulnerability/

Linux admins should prioritize patching immediately.

Follow @technadu for more threat intelligence updates.

#Linux #InfoSec #CyberSecurity #KernelExploit

Critical Linux kernel vulnerability “Fragnesia” allows local users to gain root privileges without a race condition.

Researchers warn the exploit can corrupt cached binaries in memory, persist until reboot/cache flush, and already has a public PoC on GitHub.

Source: https://cybersecuritynews.com/fragnesia-linux-vulnerability/

Linux admins should prioritize patching immediately.

Follow @technadu for more threat intelligence updates.

#Linux #InfoSec #CyberSecurity #KernelExploit

Critical Linux kernel vulnerability “Fragnesia” allows local users to gain root privileges without a race condition.

Researchers warn the exploit can corrupt cached binaries in memory, persist until reboot/cache flush, and already has a public PoC on GitHub.

Source: https://cybersecuritynews.com/fragnesia-linux-vulnerability/

Linux admins should prioritize patching immediately.

Follow @technadu for more threat intelligence updates.

#Linux #InfoSec #CyberSecurity #KernelExploit

Critical Linux kernel vulnerability “Fragnesia” allows local users to gain root privileges without a race condition.

Researchers warn the exploit can corrupt cached binaries in memory, persist until reboot/cache flush, and already has a public PoC on GitHub.

Source: https://cybersecuritynews.com/fragnesia-linux-vulnerability/

Linux admins should prioritize patching immediately.

Follow @technadu for more threat intelligence updates.

#Linux #InfoSec #CyberSecurity #KernelExploit

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

📬 Microsoft will mit Windows 11-Update Hypervisor-Cracks aushebeln
#Denuvo #HypervisorCracks #KernelExploit #Signieren #Treiber #Update #voices38 #Windows11 https://sc.tarnkappe.info/3f2d3c

The USB Attack: A Tiny Device, A Huge Risk
This vulnerability revolves around a Physical Access Vector (PAV) involving a malicious USB device. The attacker planted a USB stick with malicious firmware into the target computer's USB port, allowing it to execute arbitrary code when connected. The device exploited a flaw in the USB Mass Storage Device (MSC) protocol, enabling it to bypass driver restrictions. The attacker crafted the firmware to mimic a removable drive, which was unrecognized by the operating system and thus evaded antivirus scanning. Upon insertion, the malicious firmware triggered a built-in exploit, taking advantage of a kernel vulnerability to gain system-level access. The impact of this vulnerability is severe, as it allows unauthorized access, data theft, and malware injection. The researcher earned $5,000 for reporting this critical issue. Proper remediation involves securing USB ports with hardware restrictions and implementing firmware-level whitelisting to prevent unauthorized devices from executing arbitrary code. Key lesson: Physical access can lead to critical security breaches, making it essential to secure USB ports. #BugBounty #Cybersecurity #PAV #PhysicalAccess #KernelExploit

https://medium.com/@bugitrix/%EF%B8%8F-the-usb-attack-a-tiny-device-a-huge-risk-3a66795f65f1?source=rss------bug_bounty-5

The USB Attack: A Tiny Device, A Huge Risk
This vulnerability revolves around a Physical Access Vector (PAV) involving a malicious USB device. The attacker planted a USB stick with malicious firmware into the target computer's USB port, allowing it to execute arbitrary code when connected. The device exploited a flaw in the USB Mass Storage Device (MSC) protocol, enabling it to bypass driver restrictions. The attacker crafted the firmware to mimic a removable drive, which was unrecognized by the operating system and thus evaded antivirus scanning. Upon insertion, the malicious firmware triggered a built-in exploit, taking advantage of a kernel vulnerability to gain system-level access. The impact of this vulnerability is severe, as it allows unauthorized access, data theft, and malware injection. The researcher earned $5,000 for reporting this critical issue. Proper remediation involves securing USB ports with hardware restrictions and implementing firmware-level whitelisting to prevent unauthorized devices from executing arbitrary code. Key lesson: Physical access can lead to critical security breaches, making it essential to secure USB ports. #BugBounty #Cybersecurity #PAV #PhysicalAccess #KernelExploit

https://medium.com/@bugitrix/%EF%B8%8F-the-usb-attack-a-tiny-device-a-huge-risk-3a66795f65f1?source=rss------bug_bounty-5

📬 Sony beseitigt mit neuer Firmware-Version für PS4 & PS5 TheFlows Kernel-Exploit
#Jailbreaks #Gezine #Jailbreak #KernelExploit #Lua #TheFlow #UserlandExploit #Y2JB https://sc.tarnkappe.info/0d559c

📬 Sony beseitigt mit neuer Firmware-Version für PS4 & PS5 TheFlows Kernel-Exploit
#Jailbreaks #Gezine #Jailbreak #KernelExploit #Lua #TheFlow #UserlandExploit #Y2JB https://sc.tarnkappe.info/0d559c

📬 Sony beseitigt mit neuer Firmware-Version für PS4 & PS5 TheFlows Kernel-Exploit
#Jailbreaks #Gezine #Jailbreak #KernelExploit #Lua #TheFlow #UserlandExploit #Y2JB https://sc.tarnkappe.info/0d559c

📬 Sony beseitigt mit neuer Firmware-Version für PS4 & PS5 TheFlows Kernel-Exploit
#Jailbreaks #Gezine #Jailbreak #KernelExploit #Lua #TheFlow #UserlandExploit #Y2JB https://sc.tarnkappe.info/0d559c

📬 Sony beseitigt mit neuer Firmware-Version für PS4 & PS5 TheFlows Kernel-Exploit
#Jailbreaks #Gezine #Jailbreak #KernelExploit #Lua #TheFlow #UserlandExploit #Y2JB https://sc.tarnkappe.info/0d559c

📬 FreeBSD als Basis eines neuen PS5-Jailbreaks?
#Gaming #Jailbreaks #CVE202443102 #DebTy #FreeBSD #KernelExploit #PS5 #Zecoxao https://sc.tarnkappe.info/34865b

📬 FreeBSD als Basis eines neuen PS5-Jailbreaks?
#Gaming #Jailbreaks #CVE202443102 #DebTy #FreeBSD #KernelExploit #PS5 #Zecoxao https://sc.tarnkappe.info/34865b

📬 FreeBSD als Basis eines neuen PS5-Jailbreaks?
#Gaming #Jailbreaks #CVE202443102 #DebTy #FreeBSD #KernelExploit #PS5 #Zecoxao https://sc.tarnkappe.info/34865b

📬 FreeBSD als Basis eines neuen PS5-Jailbreaks?
#Gaming #Jailbreaks #CVE202443102 #DebTy #FreeBSD #KernelExploit #PS5 #Zecoxao https://sc.tarnkappe.info/34865b

📬 FreeBSD als Basis eines neuen PS5-Jailbreaks?
#Gaming #Jailbreaks #CVE202443102 #DebTy #FreeBSD #KernelExploit #PS5 #Zecoxao https://sc.tarnkappe.info/34865b

PoC Exploit Released For Windows Kernel EoP Vulnerability https://gbhackers.com/windows-kernel-eop-exploit-released/ #CVE/vulnerability #CyberSecurityNews #WindowsSecurity #KernelExploit #CVE202426218 #Microsoft

PoC Exploit Released For Windows Kernel EoP Vulnerability https://gbhackers.com/windows-kernel-eop-exploit-released/ #CVE/vulnerability #CyberSecurityNews #WindowsSecurity #KernelExploit #CVE202426218 #Microsoft

PoC Exploit Released For Windows Kernel EoP Vulnerability https://gbhackers.com/windows-kernel-eop-exploit-released/ #CVE/vulnerability #CyberSecurityNews #WindowsSecurity #KernelExploit #CVE202426218 #Microsoft

PoC Exploit Released For Windows Kernel EoP Vulnerability https://gbhackers.com/windows-kernel-eop-exploit-released/ #CVE/vulnerability #CyberSecurityNews #WindowsSecurity #KernelExploit #CVE202426218 #Microsoft

Apple Vision Pro bereits gehackt: Sicherheitslücke entdeckt
Erst einen Tag nach der Markteinführung der Apple Vision Pro berichtet ein Sicherheitsforscher über eine entscheidende Entdeckung. Ein Kernel-Exploit für visionOS wurde en
https://www.apfeltalk.de/magazin/news/apple-vision-pro-bereits-gehackt-sicherheitsluecke-entdeckt/
#News #Vision #AppleUpdate #KernelExploit #AppleSecurityBounty #Sicherheitslcke #Jailbreak #Malware #Technologie #visionOS #AppleVisionPro #Sicherheitsforschung

Apple Vision Pro bereits gehackt: Sicherheitslücke entdeckt
Erst einen Tag nach der Markteinführung der Apple Vision Pro berichtet ein Sicherheitsforscher über eine entscheidende Entdeckung. Ein Kernel-Exploit für visionOS wurde en
https://www.apfeltalk.de/magazin/news/apple-vision-pro-bereits-gehackt-sicherheitsluecke-entdeckt/
#News #Vision #AppleUpdate #KernelExploit #AppleSecurityBounty #Sicherheitslcke #Jailbreak #Malware #Technologie #visionOS #AppleVisionPro #Sicherheitsforschung

Apple Vision Pro bereits gehackt: Sicherheitslücke entdeckt
Erst einen Tag nach der Markteinführung der Apple Vision Pro berichtet ein Sicherheitsforscher über eine entscheidende Entdeckung. Ein Kernel-Exploit für visionOS wurde en
https://www.apfeltalk.de/magazin/news/apple-vision-pro-bereits-gehackt-sicherheitsluecke-entdeckt/
#News #Vision #AppleUpdate #KernelExploit #AppleSecurityBounty #Sicherheitslcke #Jailbreak #Malware #Technologie #visionOS #AppleVisionPro #Sicherheitsforschung

Apple Vision Pro bereits gehackt: Sicherheitslücke entdeckt
Erst einen Tag nach der Markteinführung der Apple Vision Pro berichtet ein Sicherheitsforscher über eine entscheidende Entdeckung. Ein Kernel-Exploit für visionOS wurde en
https://www.apfeltalk.de/magazin/news/apple-vision-pro-bereits-gehackt-sicherheitsluecke-entdeckt/
#News #Vision #AppleUpdate #KernelExploit #AppleSecurityBounty #Sicherheitslcke #Jailbreak #Malware #Technologie #visionOS #AppleVisionPro #Sicherheitsforschung

Apple Vision Pro bereits gehackt: Sicherheitslücke entdeckt
Erst einen Tag nach der Markteinführung der Apple Vision Pro berichtet ein Sicherheitsforscher über eine entscheidende Entdeckung. Ein Kernel-Exploit für visionOS wurde en
https://www.apfeltalk.de/magazin/news/apple-vision-pro-bereits-gehackt-sicherheitsluecke-entdeckt/
#News #Vision #AppleUpdate #KernelExploit #AppleSecurityBounty #Sicherheitslcke #Jailbreak #Malware #Technologie #visionOS #AppleVisionPro #Sicherheitsforschung

📬 PsFree: neuer Webkit-Exploit erschienen
#Gaming #Jailbreaks #CelesteBlue #KernelExploit #PS4Jailbreak #PS5Jailbreak #PsFree #QuickHENPS4 #WebkitExploit https://tarnkappe.info/artikel/jailbreaks/psfree-neuer-webkit-exploit-erschienen-284216.html

📬 PsFree: neuer Webkit-Exploit erschienen
#Gaming #Jailbreaks #CelesteBlue #KernelExploit #PS4Jailbreak #PS5Jailbreak #PsFree #QuickHENPS4 #WebkitExploit https://tarnkappe.info/artikel/jailbreaks/psfree-neuer-webkit-exploit-erschienen-284216.html

📬 PsFree: neuer Webkit-Exploit erschienen
#Gaming #Jailbreaks #CelesteBlue #KernelExploit #PS4Jailbreak #PS5Jailbreak #PsFree #QuickHENPS4 #WebkitExploit https://tarnkappe.info/artikel/jailbreaks/psfree-neuer-webkit-exploit-erschienen-284216.html

📬 PsFree: neuer Webkit-Exploit erschienen
#Gaming #Jailbreaks #CelesteBlue #KernelExploit #PS4Jailbreak #PS5Jailbreak #PsFree #QuickHENPS4 #WebkitExploit https://tarnkappe.info/artikel/jailbreaks/psfree-neuer-webkit-exploit-erschienen-284216.html

📬 PsFree: neuer Webkit-Exploit erschienen
#Gaming #Jailbreaks #CelesteBlue #KernelExploit #PS4Jailbreak #PS5Jailbreak #PsFree #QuickHENPS4 #WebkitExploit https://tarnkappe.info/artikel/jailbreaks/psfree-neuer-webkit-exploit-erschienen-284216.html

🪲 Linux Privilege Escalation vulnerability

👉 Buffer overflow
vulnerability within the Netfilter subsystem (CVE-2023-0179)

👉 Allow the leakage of both stack & heap addresses
and,potentially, a Local Privilege Escalation to the root

Poc:
https://github.com/TurtleARM/CVE-2023-0179-PoC

Write up:
https://www.openwall.com/lists/oss-security/2023/01/13/2

#infosec #KernelExploit #Exploits #linux

🪲 Linux Privilege Escalation vulnerability

👉 Buffer overflow
vulnerability within the Netfilter subsystem (CVE-2023-0179)

👉 Allow the leakage of both stack & heap addresses
and,potentially, a Local Privilege Escalation to the root

Poc:
https://github.com/TurtleARM/CVE-2023-0179-PoC

Write up:
https://www.openwall.com/lists/oss-security/2023/01/13/2

#infosec #KernelExploit #Exploits #linux

🪲 Linux Privilege Escalation vulnerability

👉 Buffer overflow
vulnerability within the Netfilter subsystem (CVE-2023-0179)

👉 Allow the leakage of both stack & heap addresses
and,potentially, a Local Privilege Escalation to the root

Poc:
https://github.com/TurtleARM/CVE-2023-0179-PoC

Write up:
https://www.openwall.com/lists/oss-security/2023/01/13/2

#infosec #KernelExploit #Exploits #linux

🪲 Linux Privilege Escalation vulnerability

👉 Buffer overflow
vulnerability within the Netfilter subsystem (CVE-2023-0179)

👉 Allow the leakage of both stack & heap addresses
and,potentially, a Local Privilege Escalation to the root

Poc:
https://github.com/TurtleARM/CVE-2023-0179-PoC

Write up:
https://www.openwall.com/lists/oss-security/2023/01/13/2

#infosec #KernelExploit #Exploits #linux

🪲 Linux Privilege Escalation vulnerability

👉 Buffer overflow
vulnerability within the Netfilter subsystem (CVE-2023-0179)

👉 Allow the leakage of both stack & heap addresses
and,potentially, a Local Privilege Escalation to the root

Poc:
https://github.com/TurtleARM/CVE-2023-0179-PoC

Write up:
https://www.openwall.com/lists/oss-security/2023/01/13/2

#infosec #KernelExploit #Exploits #linux

📬 PS Vita: Kernel-Exploit HENlo gestaltet Jailbreak sehr einfach
#Gaming #Jailbreaks #HENlo #KernelExploit #PlaystationVita #PSVita #PSVitaFirmware #PSVitaJailbreak #PSN #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps-vita-kernel-exploit-henlo-gestaltet-jailbreak-sehr-einfach-262197.html

📬 PS Vita: Kernel-Exploit HENlo gestaltet Jailbreak sehr einfach
#Gaming #Jailbreaks #HENlo #KernelExploit #PlaystationVita #PSVita #PSVitaFirmware #PSVitaJailbreak #PSN #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps-vita-kernel-exploit-henlo-gestaltet-jailbreak-sehr-einfach-262197.html

📬 PS Vita: Kernel-Exploit HENlo gestaltet Jailbreak sehr einfach
#Gaming #Jailbreaks #HENlo #KernelExploit #PlaystationVita #PSVita #PSVitaFirmware #PSVitaJailbreak #PSN #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps-vita-kernel-exploit-henlo-gestaltet-jailbreak-sehr-einfach-262197.html

📬 PS Vita: Kernel-Exploit HENlo gestaltet Jailbreak sehr einfach
#Gaming #Jailbreaks #HENlo #KernelExploit #PlaystationVita #PSVita #PSVitaFirmware #PSVitaJailbreak #PSN #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps-vita-kernel-exploit-henlo-gestaltet-jailbreak-sehr-einfach-262197.html

📬 PS Vita: Kernel-Exploit HENlo gestaltet Jailbreak sehr einfach
#Gaming #Jailbreaks #HENlo #KernelExploit #PlaystationVita #PSVita #PSVitaFirmware #PSVitaJailbreak #PSN #TheFlow https://tarnkappe.info/artikel/jailbreaks/ps-vita-kernel-exploit-henlo-gestaltet-jailbreak-sehr-einfach-262197.html

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Articles:
https://exploiter.dev/blog/2022/CVE-2022-2602.html

https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

Poc:
https://github.com/LukeGix/CVE-2022-2602

Credits: @kiks7_7 @LukeGix

#exploitdevelopment #infosec #binaryexploit
#kernelexploit #privilegeescalation #linux

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Articles:
https://exploiter.dev/blog/2022/CVE-2022-2602.html

https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

Poc:
https://github.com/LukeGix/CVE-2022-2602

Credits: @kiks7_7 @LukeGix

#exploitdevelopment #infosec #binaryexploit
#kernelexploit #privilegeescalation #linux

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Articles:
https://exploiter.dev/blog/2022/CVE-2022-2602.html

https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

Poc:
https://github.com/LukeGix/CVE-2022-2602

Credits: @kiks7_7 @LukeGix

#exploitdevelopment #infosec #binaryexploit
#kernelexploit #privilegeescalation #linux

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Articles:
https://exploiter.dev/blog/2022/CVE-2022-2602.html

https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

Poc:
https://github.com/LukeGix/CVE-2022-2602

Credits: @kiks7_7 @LukeGix

#exploitdevelopment #infosec #binaryexploit
#kernelexploit #privilegeescalation #linux

DirtyCred Remastered: how to turn an UAF into Privilege Escalation

Articles:
https://exploiter.dev/blog/2022/CVE-2022-2602.html

https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-io_uring-uaf/

Poc:
https://github.com/LukeGix/CVE-2022-2602

Credits: @kiks7_7 @LukeGix

#exploitdevelopment #infosec #binaryexploit
#kernelexploit #privilegeescalation #linux

Lessons on Linux kernel exploit development:

https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development

https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/

#exploitdevelopment #infosec #exploit #exploitation
#kernelexploit #ring0 #privilegeescalation #linux

Lessons on Linux kernel exploit development:

https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development

https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/

#exploitdevelopment #infosec #exploit #exploitation
#kernelexploit #ring0 #privilegeescalation #linux

Lessons on Linux kernel exploit development:

https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development

https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/

#exploitdevelopment #infosec #exploit #exploitation
#kernelexploit #ring0 #privilegeescalation #linux

Lessons on Linux kernel exploit development:

https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development

https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/

#exploitdevelopment #infosec #exploit #exploitation
#kernelexploit #ring0 #privilegeescalation #linux

Lessons on Linux kernel exploit development:

https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development

https://lkmidas.github.io/posts/20210123-linux-kernel-pwn-part-1/

#exploitdevelopment #infosec #exploit #exploitation
#kernelexploit #ring0 #privilegeescalation #linux

Linux Kernel ksmbd Use-After-Free Remote Code Execution Vulnerability

👉 Execute arbitrary code on affected installations

👉 Authentication not required

👉 Only systems with ksmbd enabled

https://www.zerodayinitiative.com/advisories/ZDI-22-1690/

#infosec #cve #vulnerabilities #linux #kernelexploit #binaryexploitation #exploitation

Linux Kernel ksmbd Use-After-Free Remote Code Execution Vulnerability

👉 Execute arbitrary code on affected installations

👉 Authentication not required

👉 Only systems with ksmbd enabled

https://www.zerodayinitiative.com/advisories/ZDI-22-1690/

#infosec #cve #vulnerabilities #linux #kernelexploit #binaryexploitation #exploitation

Linux Kernel ksmbd Use-After-Free Remote Code Execution Vulnerability

👉 Execute arbitrary code on affected installations

👉 Authentication not required

👉 Only systems with ksmbd enabled

https://www.zerodayinitiative.com/advisories/ZDI-22-1690/

#infosec #cve #vulnerabilities #linux #kernelexploit #binaryexploitation #exploitation