Multimodal-Unlearnable-Examples

多模态不可学习样本：保护数据免受多模态对比学习的影响 ACM MM2024 摘要...

memaddressanalysis

Mem Address Analyzer 内存地址空间分析相关的科研项目 由 NCC Group Plc 开源发布 - http://www.nccgroup.com/ Linux 版本由 Aidan Marlin 开发，邮箱 aidan dot marlin at nccgroup dot com Windows 版本由 Nikos Laleas 开发，邮箱 nikos dot laleas at nccgroup dot com 导师 Ollie Whitehouse，邮箱 ollie dot whitehouse at nccgroup dot com...

asminject

asminject.py asminject.py 是 David Buchanan 的 dlinject 项目 的一个大幅修改版分支。它通过访问 /proc//mem 而不是通过 ptrace 附加，将任意汇编（或预编译二进制）有效载荷直接注入 x86-64、x86 和 ARM32 Linux 进程。可用于篡改受信任的进程、某些后渗透场景、从进程内存中恢复内容，以及绕过某些安全控制。只要你在主机上拥有 root 权限，就可以从容器外部注入容器化进程。 你也可以在 Bishop Fox 工具页面上阅读更多关于 asminject.py 及其起源的信息，包括 一篇详细阐述启发该工具的写作。...

kernel-exploit-dirtycow

内核利用 — Dirty Cow CVE-2016-5195 作为 4Geeks Academy 网络安全专业化的一部分，通过 Dirty Cow 漏洞进行权限提升的实验室。 描述 Dirty Cow 是 Linux 内核内存子系统中的一个竞态条件（CVE-2016-5195），它允许无特权的本地用户对只读内存区域（包括 /etc/passwd）获得写访问权限。这使得无需管理员凭据即可直接提升至 root 权限。 环境 角色| 系统| IP ---|---|--- 攻击者| Kali Linux| 10.0.2.8 受害者| Ubuntu Server 16.04.1 — 内核...

process-injection-playground

Linux 进程注入演练场 一个全面的 Linux 进程注入技术合集，演示了向运行中进程注入代码的各种方法。这些示例仅供教育、安全研究以及理解底层 Linux 进程操作之用。 概述 进程注入是一种在另一个进程的上下文中运行代码的技术。虽然通常与恶意软件相关联，但这些技术也具有以下重要价值： 安全研究 ：理解攻击向量并开发防御手段 调试 ：分析和修改运行中的应用程序 插桩 ：性能分析和监控 渗透测试 ：授权的安全评估 CTF 竞赛 ：夺旗挑战 可用技术 1. 基于 Ptrace 的代码注入 目录 ：ptrace/ 经典的进程注入方法，使用 ptrace 系统调用直接将 shellcode...

CVE-2012-6422

Exynos 漏洞利用 这是一个针对早期三星手机中/dev/exynos-mem漏洞的概念验证（POC）文件。出于对内核漏洞研究的兴趣以及作为CTF挑战的一部分而编写。 漏洞利用 这些手机中引入的漏洞在于exynos-mem设备的权限设置。它允许用户同时拥有读写权限，即使是非 root 用户！ exynos-mem 设备允许用户直接读取/写入/dev/mem，这意味着你可以直接写入内核代码/数据。 通过利用/proc/iomem，你可以快速找出哪些物理地址对应于操作系统中的哪部分内存，甚至还能找到内核代码/数据内存的位置。 该漏洞利用通过以下步骤实现获取 root 权限： 1. 由于我们...

CVE-2012-0056

通过 SUID /proc/pid/mem 写入实现 Linux 本地权限提升 Mempodipper 介绍 Mempodipper，CVE-2012-0056 的一个利用工具。/proc/pid /mem 是一个接口，可以直接读写进程内存，通过使用与进程虚拟内存空间相同的地址进行定位。在 2.6.39 版本中，针对未经授权访问 /proc/pid /mem 的保护措施被认为已经足够，因此之前阻止写入任意进程内存的 ifdef 被移除了。任何拥有正确权限的人都可以写入进程内存。当然，事实证明权限检查做得并不完善。 这意味着所有 Linux 内核 =2.6.39 都存在漏洞，直到几天前...

CVE-2026-64676

A flaw was found in Kata Containers. When the mem-agent feature is enabled, an untrusted host can bypass authorization checks in the kata-agent's memory management. This allows the host to tamper with in-guest memory, leading to attacker-controlled availability and performance degradation of...

PT-2026-98514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function performs a shallow copy of the live RX ring into a clone. While some pointers are cleared, rx tpa and rx tpa...

PT-2026-98699

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the rhtab map update elem function initializes special fields after receiving an element from bpf mem cache alloc. Because the allocator may...

PT-2026-98511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function fails to propagate return values from bnxt alloc one tpa info data. When bnxt alloc one tpa info data return...

PT-2026-98702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the map kptr match type function fails to require the source register to carry the MEM PERCPU flag when storing into a BPF KPTR PERCPU field...

PT-2026-104877

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT MAP PHYSMEM END definition get free mem region and mhp get pluggable range bound their search to DIRECT MAP PHYSMEM END. LoongArch does not define it, so the fallback in include/linux/mm.h applies: under...

PT-2026-97904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On LoongArch architectures, the kernel fails to define DIRECT MAP PHYSMEM END, causing get free mem region and mhp get pluggable range to use a compile-time constant fallback that does n...

PT-2026-97982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost-scsi component where guest response descriptors are translated into userspace iovecs during command submission. Because target-core completes these commands...

PT-2026-104895

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: flush backend after device ioctls vhost-scsi translates guest response descriptors into userspace iovecs when commands are submitted. Target-core completes those commands asynchronously, so VHOST SET MEM TABLE can...

DEBIAN-CVE-2026-90172

In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdmaacceptfailed error path of smbdirectacceptconnectrequest, the receive io posted just above is owned by the QP recvio is set to NULL after a successful post...

PT-2026-94663

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Legacy I/O and memory sysfs handlers fail to verify security locked downLOCKDOWN PCI ACCESS, leaving legacy io and legacy mem files unprotected during kernel lockdown. This allows a root...

PT-2026-94763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cxgb4 driver where the write tpt entry function fails to release a STAG index when write adapter mem returns an error. The function allocates a new STAG index...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xdp: fixed an invalid wait context in pagepoolDestroy If the driver uses a page pool, it creates a page pool using pagepoolcreate. The reference count of the page pool is 1 by default. A page pool will only be destroyed when its...