312 matches found
CVE-2024-21305
CVE-2024-21305 此仓库包含 CVE-2024-21305 的报告和 PoC，即 Hypervisor-Protected Code Integrity HVCI 的非安全配置漏洞。该漏洞允许在根分区内执行任意内核模式代码，从而有效绕过 HVCI。有关根本原因，请阅读与 Andrea Allievi @aall86 共同撰写的博客文章，他是分析并修复该问题的 Windows Core OS 工程师。 此仓库中的报告是我发送给 MSRC 的内容，其中包含 PoC 和对该问题的初步分析。 时间线 7月2日，Satoshi 就漏洞的有效性咨询了 Andrea。...
CVE-2026-57583 OpenZeppelin Contracts Wizard: Line terminators in info.securityContact / info.license can inject lines into generated source
OpenZeppelin Contracts Wizard is a web application to interactively build a contract out of components from OpenZeppelin Contracts. Prior to @openzeppelin/wizard 0.10.11, @openzeppelin/wizard-cairo 3.0.1, @openzeppelin/wizard-stellar 0.6.2, and @openzeppelin/wizard-stylus 0.3.1, the setInfo code...
PPLFault
PPLFault 著者: Gabriel Landau（Elastic Security）。 Black Hat Asia 2023 で発表された PPLdump は死んだ。PPLdump 万歳！ より。 PPLFault 2024-02 更新: Microsoft は 2024 年 2 月 13 日に PPLFault にパッチを適用しました。関連する議論はこのスレッド を参照してください。 Windows コード整合性の TOCTOU を悪用して、WinTcb-Light として任意のコード実行を実現し、指定されたプロセスをダンプします。エクスプロイトの詳細については、私の スライド...
CVE-2026-18796
Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...
CVE-2026-18796
CVE-2026-18796 affects the nRF5340 (Nordic Semiconductor) when using external QSPI flash for encrypted XIP (eXecute In Place). The weakness lies in the on-the-fly decryption scheme , not in any specific nRF Connect SDK version, making it a side-channel leakage vulnerability. An attacker with phys...
CVE-2026-58439
A flaw was found in Gitea. This vulnerability allows an attacker to bypass branch protection by retargeting a Pull Request PR that has a stale 'official' approval flag. This could lead to unauthorized code being merged into a protected branch, compromising code integrity. Mitigation Mitigation fo...
CVE-2026-22306
CVE-2026-22306 is a CRITICAL (CVSS 10.0) vulnerability in OZOLS ERP (Ozols Grupa) on Windows, caused by an abandoned auto-update domain . The affected components include the OzolsSQL client update path , the _update SQL Server Agent job (@subsystem = N'ActiveScripting'), and serv_update.vbs . The...
PT-2026-78641
Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...
CVE-2025-59326
CVE-2025-59326 affects CPSD CryptoPro Secure Disk for Bitlocker; prior to v7.7.4, it does not enforce IMA policy protections on temporary file systems, enabling unsigned code execution from those locations. Root cause: IMA policy enforcement gap. Impact: high (per CVSS 3.1). Remediation: upgrade ...
CVE-2026-50491
Out-of-bounds read in Code Integrity DLL ci.dll allows an authorized attacker to elevate privileges locally...
CVE-2026-50491 Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability
...
CVE-2026-50491
The CVE-2026-50491 entry documents an out-of-bounds read in the Code Integrity DLL (ci.dll) that enables an authorized local attacker to achieve Elevation of Privileges. Affected component: Windows Code Integrity mechanism (ci.dll). Root cause: out-of-bounds read in ci.dll leading to privilege es...
CVE-2026-50491 Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability
...
Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability
Out-of-bounds read in Code Integrity DLL ci.dll allows an authorized attacker to elevate privileges locally...
PT-2026-58465
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the Code Integrity DLL ci.dll allows an authorized, low-privileged attacker to elevate privileges locally to gain near-total control of the system. Recommendations...
The vulnerability of Ollama’s system for running and managing large language models lies in the fact that code is loaded without any checks for its integrity, allowing attackers to execute arbitrary code.
The vulnerability of the Ollama system for running and managing large language models is related to the loading of code without checking its integrity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Dynamic Vectorization and Streaming Transfer (DVS) implementation of the Cisco Secure Web Appliance allows a hacker to circumvent existing security restrictions.
The vulnerability of the Dynamic Vectorization and Streaming Transfer DVS mechanism implemented in Cisco Secure Web Appliance lies in the loading of code without checking its integrity. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...
EUVD-2026-3111
Microsoft Edge Elevation Service exposes a privileged COM interface that inadequately validates the privileges of the calling process. A standard non‑administrator local user can invoke the IElevatorEdge interface method LaunchUpdateCmdElevatedAndWait, causing the service to execute privileged...