Multimodal-Unlearnable-Examples

多模态不可学习样本：保护数据免受多模态对比学习的影响 ACM MM2024 摘要...

kernel-exploit-dirtycow

内核利用 — Dirty Cow CVE-2016-5195 作为 4Geeks Academy 网络安全专业化的一部分，通过 Dirty Cow 漏洞进行权限提升的实验室。 描述 Dirty Cow 是 Linux 内核内存子系统中的一个竞态条件（CVE-2016-5195），它允许无特权的本地用户对只读内存区域（包括 /etc/passwd）获得写访问权限。这使得无需管理员凭据即可直接提升至 root 权限。 环境 角色| 系统| IP ---|---|--- 攻击者| Kali Linux| 10.0.2.8 受害者| Ubuntu Server 16.04.1 — 内核...

process-injection-playground

Linux 进程注入演练场 一个全面的 Linux 进程注入技术合集，演示了向运行中进程注入代码的各种方法。这些示例仅供教育、安全研究以及理解底层 Linux 进程操作之用。 概述 进程注入是一种在另一个进程的上下文中运行代码的技术。虽然通常与恶意软件相关联，但这些技术也具有以下重要价值： 安全研究 ：理解攻击向量并开发防御手段 调试 ：分析和修改运行中的应用程序 插桩 ：性能分析和监控 渗透测试 ：授权的安全评估 CTF 竞赛 ：夺旗挑战 可用技术 1. 基于 Ptrace 的代码注入 目录 ：ptrace/ 经典的进程注入方法，使用 ptrace 系统调用直接将 shellcode...

CVE-2012-6422

Exynos 漏洞利用 这是一个针对早期三星手机中/dev/exynos-mem漏洞的概念验证（POC）文件。出于对内核漏洞研究的兴趣以及作为CTF挑战的一部分而编写。 漏洞利用 这些手机中引入的漏洞在于exynos-mem设备的权限设置。它允许用户同时拥有读写权限，即使是非 root 用户！ exynos-mem 设备允许用户直接读取/写入/dev/mem，这意味着你可以直接写入内核代码/数据。 通过利用/proc/iomem，你可以快速找出哪些物理地址对应于操作系统中的哪部分内存，甚至还能找到内核代码/数据内存的位置。 该漏洞利用通过以下步骤实现获取 root 权限： 1. 由于我们...

CVE-2012-0056

通过 SUID /proc/pid/mem 写入实现 Linux 本地权限提升 Mempodipper 介绍 Mempodipper，CVE-2012-0056 的一个利用工具。/proc/pid /mem 是一个接口，可以直接读写进程内存，通过使用与进程虚拟内存空间相同的地址进行定位。在 2.6.39 版本中，针对未经授权访问 /proc/pid /mem 的保护措施被认为已经足够，因此之前阻止写入任意进程内存的 ifdef 被移除了。任何拥有正确权限的人都可以写入进程内存。当然，事实证明权限检查做得并不完善。 这意味着所有 Linux 内核 =2.6.39 都存在漏洞，直到几天前...

memaddressanalysis

Mem Address Analyzer 内存地址空间分析相关的科研项目 由 NCC Group Plc 开源发布 - http://www.nccgroup.com/ Linux 版本由 Aidan Marlin 开发，邮箱 aidan dot marlin at nccgroup dot com Windows 版本由 Nikos Laleas 开发，邮箱 nikos dot laleas at nccgroup dot com 导师 Ollie Whitehouse，邮箱 ollie dot whitehouse at nccgroup dot com...

asminject

asminject.py asminject.py 是 David Buchanan 的 dlinject 项目 的一个大幅修改版分支。它通过访问 /proc//mem 而不是通过 ptrace 附加，将任意汇编（或预编译二进制）有效载荷直接注入 x86-64、x86 和 ARM32 Linux 进程。可用于篡改受信任的进程、某些后渗透场景、从进程内存中恢复内容，以及绕过某些安全控制。只要你在主机上拥有 root 权限，就可以从容器外部注入容器化进程。 你也可以在 Bishop Fox 工具页面上阅读更多关于 asminject.py 及其起源的信息，包括 一篇详细阐述启发该工具的写作。...

Astra Linux – Vulnerability in ffmpeg5

FFmpeg v.n6.1-3-g466799d4f5 allows for memory consumption when using the colorcorrect filter, specifically in the avmalloc function located at line 105:9 of the libavutil/mem.c file...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm: slub: Fix the invocation of flushcpuslab and freeslab in the task context. The commit 5a836bf6b09f “mm: slub: move the invocation of flushcpuslab and freeslab out of the IRQ context” fixes this issue by moving all invocations...

Astra Linux – Vulnerability in libmysofa

Incorrect handling of input data in the mysofaresamplerresetmem function in the libmysofa library between versions 0.5 and 1.1 may lead to heap buffer overflow and overwriting of a large memory block...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pcmcia: Error handling was added for the addinterval function within dovalidatemem. In dovalidatemem, the call to addinterval does not handle errors. If kmalloc fails during addinterval, it may result in a null pointer being...

PT-2026-79650

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: error out for 10000 active mem bp damos quota score can trigger division by zero if the target value is zero. DAMON LRU SORT lets users set the target value for the hot memory scheme via active mem bp parameter...

CVE-2026-72145

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in memwrite In memwrite, the temporary array returned by parseintarrayuser must be released on all exit paths. Convert the array variable to use cleanup.h scope-based cleanup so it is...

PT-2026-72788

In the Linux kernel, the following vulnerability has been resolved: of: reserved mem: avoid post-init UAF when alloc reserved mem array fails The global pointer 'reserved mem' continues to reference the reserved mem array which lives in initdata if alloc reserved mem array fails. of reserved mem...

PT-2026-72333

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem write In mem write, the temporary array returned by parse int array user must be released on all exit paths. Convert the array variable to use cleanup.h scope-based cleanup so i...

EUVD-2026-55586

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's epmemoffset to calculate the start of the endpoint memory access array and to comply with the FF-A spec instead of defaulting to...

AZL-94685 CVE-2026-64676 affecting package kata-containers-preview 3.27.0~preview2-2

Kata Containers is an open source implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 4.0.0, the kata-agent is vulnerable to an authorization bypass in confidential-guest memory management. In Confidential Containers CoCo deployments, the kata-age...

CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory

Kata Containers is an open source implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 4.0.0, the kata-agent is vulnerable to an authorization bypass in confidential-guest memory management. In Confidential Containers CoCo deployments, the kata-age...

CVE-2026-64676

Kata Containers versions before 4.0.0: the kata-agent is vulnerable to an authorization bypass in confidential-guest memory management. In Confidential Containers deployments, the agent enforces an OPA/Rego-based AgentPolicy to authorize every ttRPC call; two mem-agent–related ttRPC methods miss ...

CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory

Kata Containers is an open source implementation of lightweight Virtual Machines VMs that perform like containers. In versions prior to 4.0.0, the kata-agent is vulnerable to an authorization bypass in confidential-guest memory management. In Confidential Containers CoCo deployments, the kata-age...