CVE-2024-33901-ProofOfConcept

CVE-2024-33901-ProofOfConcept 用于演示 KeePassXC 2.7.7 中 CVE-2024-33901 漏洞的简短程序 该报告可能需要在类中附上源代码链接，所以我才创建了这个仓库 如何复现该漏洞 1. 打开 KeePassXC 并认证数据库 2. 在数据库已认证的情况下，为其创建内存转储文件 这可以通过获取 PID 来实现，可以使用以下命令获取 PID： ps aux | grep keepassxc 然后运行以下命令：sudo gcore -o keepassxcdump PIDHERE 例如，如果你获取到的 PID 是 1234，那么命令应为： sud...

Exploit for Cleartext Storage of Sensitive Information in Memory in Keepassxc

CVE-2024-33901-ProofOfConcept Short program that demonstrates...

CVE-2024-33901

Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...

CVE-2024-33901

Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...

CVE-2024-33901

KeePassXC 2.7.7 is affected by CVE-2024-33901: an attacker with the victim’s privileges can recover some passwords stored in the .kdbx database via a memory dump. The vendor disputes the claim, citing unavoidable memory-management constraints in the current design. A Proof-of-Concept repo demonst...

CVE-2024-33901

Issue in KeePassXC 2.7.7 allows an attacker who has the privileges of the victim to recover some passwords stored in the .kdbx database via a memory dump. NOTE: the vendor disputes this because memory-management constraints make this unavoidable in the current design and other realistic designs...