39 matches found
lvi-lfb-attack-poc
LVI-LFB 제어 흐름 하이재킹 공격 PoC CVE-2020-0551 이 저장소에는 LVI-LFB 제어 흐름 하이재킹 공격 PoC의 소스가 포함되어 있습니다. 목차 lvi-cfh-poc - line-fill buffer 스프레이를 통한 다른 프로세스의 제어 흐름 하이재킹 백서 사전 요구 사항 1. Visual Studio 2015 2. 취약한 Intel CPU 저자 Andrei Vlad LUȚAȘ Dan Horea LUȚAȘ 추가 리소스 Bitdefender 블로그 게시물:...
cve-2016-7190
Aperçu CVE-2016-7190 0 est un débordement de tas dans la fonction Array.map de ChakraCore qui permet d'écraser la mémoire adjacente. L'idée principale pour obtenir un accès en lecture-écriture arbitraire est d'abord d'allouer plusieurs tableaux d'entiers JavaScript consécutifs, puis d'exploiter l...
DataInject-BOF
Data Inject BOF Реализация beacon object file для proof-of-concept внедрения процессов из моего поста в блоге Control Flow Hijacking via Data Pointers. Перехватывает поток управления путём перезаписи указателей функций Control Flow Guard в combase.dll, вызываемых COM-проксирующими функциями. Важн...
SUSE CVE-2026-88047
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
DEBIAN-CVE-2026-88047
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
CVE-2026-88047
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
CVE-2026-88047
A flaw was found in Tesseract. This vulnerability, a stack buffer overflow, occurs when the OCR engine processes a specially crafted .traineddata file. An attacker can exploit this by providing a malformed input, leading to stack corruption, a denial of service DoS, and potentially allowing for...
CVE-2026-88047
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
EUVD-2026-75590
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
CVE-2026-88047 Tesseract: ReadNormProtos stack buffer overflow
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
Linux Distros Unpatched Vulnerability : CVE-2026-88047
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a...
CVE-2026-88047: Stack-based Buffer Overflow
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadNormProtos in src/classify/normmatch.cpp parses the NORMPROTO component of a .traineddata file and uses std::istream::operatorchar to extract a whitespace-delimited token into a fixed 61-byte stack buffer without...
CVE-2026-19874: Heap-based Buffer Overflow
A heap-based buffer overflow vulnerability exists in Konami's Metal Gear Online 3, originating from improper validation of lobby data fields related to kicked players. The affected function processes a list of kicked player identifiers using the lobby data key "kicknum" to determine the number of...
CVE-2026-12522: Out-of-bounds Write
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation
Large language model LLM agents are rapidly moving from conversational interfaces to software components that plan, invoke tools, maintain memory, and act on external environments. This transition changes the nature of security risk. In agentic settings, failures are no longer limited to unsafe...
arm-64-exploit-demo
ARM64 Buffer Overflow Exploit Demo A from-scratch demonstrati...
happy-dom 安全漏洞
happy-dom is a JavaScript implementation of a web browser without a graphical user interface by the individual developer David Ortner. A security vulnerability exists in happy-dom prior to version 20.0.2, which stems from insufficient isolation and could lead to prototype pollution attacks and...
EUVD-2018-3587
Malware in sbrugna...