13155 matches found
BlobRunner
BlobRunner BlobRunner — это простой инструмент для быстрой отладки шеллкода, извлечённого в ходе анализа вредоносного ПО. BlobRunner выделяет память для целевого файла и переходит к базовому адресу или смещению выделенной памяти. Это позволяет аналитику быстро начать отладку извлечённых артефакто...
CVE-2026-32941
Уязвимость в масштабе всего фреймворка Sliver C2 позволяет неаутентифицированному удаленному атакующему вызвать отказ в обслуживании, инициируя неконтролируемое выделение памяти CWE-789 / CWE-400, что приводит к аварийному завершению процесса из-за исчерпания памяти OOM. Ссылки: Tenable Шаги...
EUVD-2026-83282
SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handlestagingreq that fails to validate chunkidx from ZMQ STAGINGREQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame wit...
GHSA-7Q85-XJ36-VMFC adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
Summary adm-zip allocates an entry's output buffer from the declared uncompressed size central-directory size field before validating it against the actual data. A tiny crafted ZIP that declares a huge uncompressed size forces a multi-gigabyte allocation from a few bytes. Impact On adm-zip 0.5.17...
NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
NPM: adm-zip: Uncontrolled memory allocation via the declared uncompressed size DoS vulnerability discovered by ? in WordPress Npm adm-zip versions 0.6.1...
CVE-2026-77301
adm-zip is a Node.js JavaScript library for creating and extracting ZIP archives. Prior to version 0.6.1 , the getData() function in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and de...
CVE-2026-77301 adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and decompression result. A...
CVE-2026-77301 adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and decompression result. A...
EUVD-2026-83170
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData in zipEntry.js trusts an entry's central-directory uncompressed size and allocates output memory before validating that value against the actual compressed data and decompression result. A...
CVE-2026-93688 SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstraproom values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrary bootstraproom...
CVE-2026-93688
SGLang through 0.5.19 is affected by an unbounded memory allocation vulnerability in its prefill/decode disaggregation mode using the Mooncake KV transfer backend . The root cause is a failure to validate bootstrap_room values, which allows an unauthenticated attacker to submit arbitrary values v...
CVE-2018-19320-LPE
Эксплойт для LPE CVE-2018-19320 Описание Эксплойт локального повышения привилегий для CVE-2018-19320. Эксплойт использует открытые функции в gdrv.sys , которые позволяют низкоуровневому пользователю выделять и записывать данные в память для повышения привилегий до SYSTEM. Скриншот Тестировалось н...
unicorn-bios
unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: root@kitploit: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in...
GPU_ShellCode
Отравление gpu; спрятать пейлоад внутри памяти gpu. После моего более раннего репозитория, в котором я использовал описание потока, чтобы спрятать пейлоад, я захотел найти новый способ, так что теперь я использую память gpu nividia с помощью cuda api, чтобы выделять, записывать и освобождать её,...
EUVD-2026-82568
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
EulerOS Virtualization 2.12.1 : mod_http2 (EulerOS-SA-2026-3598)
According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...
CVE-2026-93307
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to...
CVE-2026-93307
CVE-2026-93307 affects the VES Collector component in O-RAN-SC SMO OAM (version 2025-06-10). The vulnerability stems from manipulation of the additionalFields.padding argument, which leads to uncontrolled memory allocation . An attacker with low privileges can exploit this remotely , resulting in...
CVE-2026-90389
CVE-2026-90389 is a bug in the Linux kernel md (multiple device) subsystem . The root cause is that a memalloc_noio_save() token is stored in mddev->noio_flags, allowing one task to save the token and another task to restore it . With concurrent sysfs writes to suspend_lo and suspend_hi, task ...