OnTheEdge

OnTheEdge OnTheEdge 是一个用 C 编写的小型 Windows 研究 PoC，用于研究浏览器运行期间 Microsoft Edge 进程内存中可能存在的凭据相关数据。 该项目提供两个变体： 独立可执行文件 — 用于本地测试和研究。 BOF — 用于受控的 C2 实验室环境。 免责声明： 本项目仅用于经授权的安全研究、恶意软件分析、测试环境和教育用途。请勿在未经明确授权的系统或账户上使用它。 输出 该工具以简单的控制台格式显示内存扫描过程中发现的信息。 示例： ================================================ OnTheEd...

watcher

アンチリバースシェル こんにちは、私の名前はthemoon（別名shalev）です。このプロジェクトは、セキュリティが低いサーバーを運用している人々を支援するために作成しました。このプロジェクトを使用して、リバースシェルを試みる攻撃者からコンピュータを保護できます。 このプロジェクトについての情報 このプロジェクトの動作はこちらで確認できます https://miro.com/app/board/uXjVGAn3Ml8=/?sharelinkid=431140843238 リバースシェル 不審なプロセスとコマンド実行の検出...

Imperius

Imperius LKMルートキットを再び可視化します。 これは、例えばdiamorphineルートキットなどから "moduleshow" 関数のアドレスを取得し、それを呼び出してlsmodに追加し直すことで、LKMルートキットの削除を可能にするものです。 非常にシンプルなカーネルでは、 /sys/kernel/tracing/availablefilterfunctionsaddrs を使って関数アドレスを取得できますが、これはカーネル6.5x以降でのみ利用可能です。...

CVE-2026-98156

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-98156: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...

CVE-2026-72174

A flaw was found in the Linux kernel. A local attacker could trigger a self-deadlock condition within the huge pages hugetlb memory management subsystem. This occurs when a specific memory scan operation attempts to acquire a write lock while the same process already holds a read lock, causing th...

hermes-agent has an Injection issue

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

CVE-2026-10223

A weakness has been identified in NousResearch hermes-agent up to 2026.4.30. This affects the function scanmemorycontent of the file tools/memorytool.py. This manipulation causes injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used f...

PT-2026-45267

Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 2026.4.31 Description A remote injection flaw exists in the scan memory content function within the tools/memory tool.py file. This weakness allows a remote attacker to initiate an injection attack...

mm/vmscan: don't try to reclaim hwpoison folio

...

SUSE CVE-2015-7970

The p2mpodemergencysweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service CPU consumption and possibly reboot via crafted memory contents that triggers a "time-consuming linear scan,"...

Server-side attacks, C&C in public clouds and other MDR cases we observed

Introduction This report describes several interesting incidents observed by the Kaspersky Managed Detection and Response MDR team. The goal of the report is to inform our customers about techniques used by attackers. We hope that learning about the attacks that took place in the wild helps you t...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-finder A Python3 script to scan the filesystem to find...

Trend Micro Password Manager vulnerable to information disclosure

Overview Password Manager provided by Trend Micro Incorporated contains an information disclosure vulnerability CWE-200. Under certain conditions, the information ID, password etc. managed by Password Manager are kept on the memory in plaintext. They may be retrieved when the memory scan is done...

JVN#49593434: Trend Micro Password Manager vulnerable to information disclosure

Password Manager provided by Trend Micro Incorporated contains an information disclosure vulnerability CWE-200. Under certain conditions, the information ID, password etc. managed by Password Manager are kept on the memory in plaintext. They may be retrieved when the memory scan is done. Impact A...

YARA Memory Scan (Linux)

Binary data linuxyaramemscan.nbin...

Linux/x86 - Egg-hunter Shellcode (25 bytes)

/ ;author: Filippo "zinzloun" Bersani ;date: 25/11/2016 ;version 1.0 ;purpose: different approach with fnstenv technique, changed the usual pattern to find the egg mark ;X86 Assembly/NASM Syntax ;tested on: Linux OpenSuse001 2.6.34-12-desktop 32bit ; Linux ubuntu 3.13.0-100-generic...

UBUNTU-CVE-2015-7970

The p2mpodemergencysweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service CPU consumption and possibly reboot via crafted memory contents that triggers a "time-consuming linear scan,"...

CVE-2005-1711

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected...

CVE-2005-1711

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected...