CVE-2025-7771

CVE-2025-7771 通过滥用 ThrottleStop 驱动程序，从用户模式调用任意内核模式函数的漏洞利用程序。 演示 参考 https://github.com/jonomango/superfetch https://securelist.com/av-killer-exploiting-throttlestop-sys/117026/...

exrop

Exrop Automatic ROP chain generator for x86-64 binaries, powered by Triton symbolic execution. Features Set registers to constants or other registers rdi=0x41414141, rdi=rax Write to memory constant and register-based addresses/values Write strings/bytes to memory Function calls with mixed...

peach

Peach Fuzz - 漏洞扫描框架 该工具旨在扫描给定目录中的文件，检测任何不安全、存在漏洞或危险的函数调用。它设计为可扩展且易于理解；你可以“即插即用”模块，这些模块指定触发何种“扫描”的文件类型标准，由你决定在每个文件中发现并报告危险内容时应采取的操作。 此外，它也可以作为实验性的自动模糊测试工具运行。在拥有有效模块的情况下，该框架可以适应自动对可执行文件进行模糊测试。你可以使用通用的 fuzz.fuzzer.Fuzzer 类来实现模糊器。警告：该类是 scan.scanner.Scanner 的子类，但会执行所有具有可执行权限的文件！请小心！ 用法 $ ./peach.py -...

Linux Distros Unpatched Vulnerability : CVE-2026-94636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in...

x64dbg-xfg-marker

x64dbg XFG Marker Plugin Microsoft eXtended Flow Guard XFG is a control-flow integrity CFI technique that extends CFG with function call signatures. Each signature is 8 bytes long, and is located right before the target function. Since the signature is located in the code section, x64dbg gets...

EUVD-2026-91560

Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-94636

The Apache Thrift py bindings are vulnerable to improper handling of highly compressed data (data amplification), function calls with incorrectly specified arguments, and improper validation of specified quantities in input. Specifically, the Python TZlibTransport stops enforcing its decompressed...

MSRKit

MSRKit Una herramienta para llamar funciones del kernel y mapear controladores mediante una cadena ROP a través de una primitiva wrmsr en un controlador vulnerable AmdTools64.sys. Cómo funciona 1. Carga AmdTools64.sys mediante NtLoadDriver recurre a PnP devnode + interfaz de dispositivo basada en...

AZL-104372 CVE-2026-98075 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

CVE-2026-98075

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

CVE-2026-98075: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is invoked from bpfjitsubprogs only when env-subprogcnt 1. Meaning that f...

CVE-2026-96654

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...

EUVD-2026-85368

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...

CVE-2026-96654 Plex Media Server URL injection

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...

CVE-2026-96654 Plex Media Server URL injection

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...

CVE-2026-96654

Plex Media Server versions prior to 1.43.3.10861 are vulnerable to a URL injection flaw. The software fails to correctly neutralize URL values within the 'searchOne' parameter, which enables an attacker to call functions from other plugins and provide their own parameters. While the documents do ...

CVE-2026-96654: Improper Neutralization of Encoded URI Schemes in a Web Page

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...

PT-2026-97404

Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...

CVE-2026-88856

OrdaSoft Joomla Gallery extension for Joomla versions

PT-2026-93277

The WP Import Export Lite WordPress plugin before 3.9.33 does not restrict which PHP function may be applied to exported field values, allowing users granted its export permission to have arbitrary functions invoked on values they control, leading to remote code execution...