Driver-kaldereta

Kaldereta メモリ変更を行う未署名のカーネルモードドライバ 機能 プロセスIDの取得 イメージのベースアドレスの取得 メモリ領域の保護属性の変更 メモリ領域の確保 メモリの解放 アドレスからの読み取り/書き込み オフセット付きアドレスからの読み取り/書き込み メモリからバッファへの読み取り バッファからメモリへの書き込み マウスイベントのシミュレート キーボードイベントのシミュレート パターンスキャン 手動マップ x64 セットアップ Windows Driver Kitをインストール KDMapperで.sysファイルをロード サポート...

ipa-medit

ipa-medit Ipa-medit은 탈옥 없이 재서명된 ipa를 위한 메모리 검색 및 패치 도구입니다. iPhone 및 Apple Silicon Mac에서 실행되는 iOS 앱을 지원합니다. 모바일 게임 보안 테스트를 위해 만들어졌습니다. 많은 모바일 게임에 탈옥 탐지 기능이 있지만, ipa-medit은 탈옥이 필요하지 않으므로 탈옥 탐지를 우회하지 않고도 메모리 수정이 가능합니다. Motivation 메모리 수정은 게임에서 치트를 하는 가장 쉬운 방법이며, 보안 테스트에서 확인해야 할 항목 중 하나입니다. GameGem 및...

TeamViewer_Permissions_Hook_V1

TeamViewer Permissions Hook V1 概念実証用のインジェクタブルC++ DLLであり、ネイキッドインラインフッキングと直接メモリ改変を使用してTeamViewerの権限を変更します。 機能 サーバー側 - 右側のポップアップメニューに追加のメニュー項目オプションを有効にします。これまで最も有用なのは、通常はクライアントとの制御認証が完了し、制御/サイドの変更を開始した後にのみアクティブになる「サイド切り替え」機能を有効にすることです。 クライアント側 - サーバーの現在の制御設定や権限に関係なく、マウスの制御を可能にします。 デモ サーバー側 クライアント側...

CVE-2018-4878

CVE-2018-4878 POC CVE-2018-4878 は、TEMP.Reaper によって実際の攻撃で悪用されたことが初めて確認されました。 このリポジトリには、解析したマルウェアから作成した POC が含まれており、Use-After-Free の脆弱性を悪用して32ビット版の Flash 27 に対して動作することが確認されています。 攻撃が成功すると、攻撃者はプロセスメモリを改ざんできる ByteArray オブジェクトを取得できます。 脆弱性の詳細な分析は こちら でご覧いただけます。...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000573)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000573 advisory. Buffer Over-read in function findnextquote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000556 advisory. Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification...

CVE-2026-15688

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

CVE-2026-15688 Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

CVE-2026-15688 Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

EUVD-2026-81400

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

Mitsubishi Electric GX Works3 and Motion Control Settings

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with,...

CVE-2026-15688: Incorrect Implementation of Authentication Algorithm

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

ALPINE-CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1722:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1722:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

AlmaLinux 9 : nginx:1.26 (ALSA-2026:59496)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59496 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service ...

RLSA-2026:59362 Important: nginx security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

RLSA-2026:59496 Important: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

RockyLinux 9 : nginx (RLSA-2026:59362)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59362 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...

AlmaLinux 9 : nginx (ALSA-2026:59362)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59362 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service ...