ColdWer

엔드포인트에서의 냉전 🥶 ColdWer ColdWer 는 WerFaultSecure.exe PPL 우회를 활용하여 최신 Windows 시스템에서 EDR/AV 프로세스를 정지시키고 LSASS 메모리를 덤프합니다. root@kitploit: C O L D W E R └─┴─┴── WerFaultSecure └─┴──────── LSASS Dump └─┴──────────── Cold Freeze EDR/AV를 정지시키고 필요한 것을 추출하세요. 차갑게 유지하세요. 👤 Author Sh3llf1r3 @0xsh3llf1r3 🙏...

EDR-Freeze

EDR-Freeze これは、BYOVD（Bring Your Own Vulnerable Driver）攻撃手法を使用せずに、WerFaultSecure のソフトウェア脆弱性を悪用して EDR およびアンチマルウェアのプロセスを一時停止させるツールです。 EDR-Freeze はユーザーモードで動作するため、追加のドライバーをインストールする必要はありません。最新バージョンの Windows で実行できます。 実験は、プロジェクト作成時点の最新バージョンの Windows（Windows 11 24H2 ）で実施されました。 コマンドライン構文 EDR-Freeze.exe...

mirth-connect-security-poc

NextGen Connect 4.5.2 脆弱性 PoC NextGen Connect Mirth Connect 4.5.2 に存在するネットワーク到達可能な3つの脆弱性に対する、動作する概念実証エクスプロイトです。ハーネスは公式コンテナイメージを実行し、発見事項に必要なチャネル設定のみを作成し、別のコンテナから攻撃を実行し、主張されたセキュリティ効果が観測されない限り失敗します。 このレビューでは、公開されている Refute-or-Promote 手法 とその オープンソースのオーケストレーションプレイブック...

proposal-symbol-proto

プロトタイプ汚染の緩和 / Symbol.proto 著者 : Santiago Díaz Google チャンピオン : Shu-yu Guo Google ステージ : 1 目次 問題の説明 不気味な遠隔作用 データのみの攻撃 freeze、seal、preventExtensionsの問題 オーバーライドの誤り 粗い粒度 凍結時点 アプリケーションの種類 提案する解決策 リフレクションAPIの提供 オプトイン機能 自動リファクタリング deleteは何を意味するのか 互換性のないコードベース 付録 コンストラクタ汚染についてはどうか 圧縮されたJSにおける計算アクセス 脆弱性の例...

Freeze

이 저장소는 보관 처리되었습니다 Freeze의 최신 버전을 확인하거나 이슈를 제출하려면 https://github.com/Tylous/Freeze를 참조하세요. Freeze 추가 정보 이 프레임워크에서 사용된 기술에 대해 더 자세히 알고 싶다면 SourceZero 블로그를 참조하세요. 설명 Freeze는 EDR 보안 제어를 우회하여 쉘코드를 은밀하게 실행하기 위한 페이로드 생성 도구입니다. Freeze는 사용자랜드 EDR 후크를 제거할 뿐만 아니라 다른 엔드포인트 모니터링 제어를 우회하는 방식으로 쉘코드를 실행하기 위해 여러...

CVE-2026-26903-PoC

CVE-2026-26903 PoC TanStack QueryのreplaceEqualDeep関数における無制限再帰によるサービス拒否 深くネストされたオブジェクトを含む単一の細工されたクエリ更新で、JavaScriptスレッドを無期限にフリーズ させ、アプリケーション全体を応答不能にすることができます。認証や特別な権限は必要ありません。 影響を受けるバージョン この脆弱性は、2026年1月14日に公開されたPR 10032 によって @tanstack/[email protected] で修正されました。...

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service DoS, where the affected browser tab may...

CVE-2020-37277 PocketMine-MP before 3.15.4 Denial of Service via InventoryTransaction

PocketMine-MP versions before 3.15.4 contain a denial of service vulnerability in the InventoryTransaction component's findResultItem method. Malicious clients can send specially crafted InventoryTransactionPackets with multiple conflicting pathways to cause exponential processing complexity,...

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name

A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service DoS, where the affected browser tab may...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: virtionet: Fixed the issue with xdprxqinfo after suspend/resume. The following sequence currently causes a driver bug warning when using virtionet: bash ip link set eth0 up echo mem /sys/power/state or e.g. rtcwake -s 10 -m mem i...

Astra Linux – Vulnerability in Linux 5.10

A race condition was detected in the Linux kernel’s ebpf verifier between bpfmapupdateelem and bpfmapfreeze, due to a missing lock in the kernel/bpf/syscall.c file. In this flaw, a local user with special privileges capsysadmin or capbpf can modify the frozen mapped address space. This flaw affec...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: The quota: flush quotareleasework upon quota writeback issue has been addressed. One of the paths for quota writeback is called from freezesuper, syncfilesystem, ext4syncfs, and dquotwritebackdquots. Since we currently do not...

UBUNTU-CVE-2026-74614

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

CVE-2026-74614

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100095)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100095 advisory. In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not...

CVE-2026-74481

In the Linux kernel, the following vulnerability has been resolved: mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset their underlying virtio devices and delete their virtqueues via...

AZL-96102 CVE-2026-74481 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/pagereporting: use systemfreezablewq to fix UAF during suspend During PM freeze e.g. S3 suspend or S4 hibernation, device drivers like virtioballoon reset their underlying virtio devices and delete their virtqueues via...

UBUNTU-CVE-2026-74463

In the Linux kernel, the following vulnerability has been resolved: i2c: jz4780: Cache host clock rate at probe to prevent CCF preparelock deadlock Fix a severe AB/BA deadlock between the Common Clock Framework CCF and the I2C adapter lock, which triggers when an I2C-controlled clock generator...

CVE-2026-74481

The CVE-2026-74481 entry describes a Linux kernel UAF/GPF during PM suspend caused by page_reporting work being scheduled on the non-freezable system_wq. Child devices (e.g., virtio_balloon) delete virtqueues as part of suspend, but page_reporting_process could still run, triggering virtballoon_f...

UBUNTU-CVE-2026-74307

In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4IOCMOVEEXT Reject the EXT4IOCMOVEEXT ioctl early if the donor file does not belong to the same superblock as the original file. Currently, this validation is performed inside...