patriot

Patriot Piccolo progetto di ricerca per il rilevamento di varie tecniche stealth in memoria. Scarica l'ultima release qui. La versione attuale supporta i seguenti rilevamenti: Strutture CONTEXT sospette che puntano a funzioni VirtualProtect. Prende di mira la ricerca di Austin Hudson Foliage e Ek...

EUVD-2026-96746

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

CVE-2026-14854 WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

CVE-2026-14854

The WooCommerce Bookings WordPress plugin, in versions prior to 3.11.0 , is vulnerable to an unauthenticated Denial of Service (DoS) . The flaw exists because the plugin fails to limit a user-supplied value used for memory allocation within an unauthenticated AJAX action . An unauthenticated atta...

CVE-2026-98310

A flaw was found in the Linux kernel's Intel Xe graphics driver. A local user can cause a Denial of Service DoS by triggering memory reclaim operations while the device is in a runtime-suspended state. This issue occurs because the driver's memory shrinker does not acquire a runtime power...

shed

Shed - Inspector de tiempo de ejecución de .NET Shed es una aplicación que permite inspeccionar el tiempo de ejecución .NET runtime de un programa para extraer información útil. Puede usarse para inspeccionar aplicaciones maliciosas y obtener una primera visión general de qué información se...

CVE-2026-98307

A flaw was found in the Linux kernel's ath11k wireless driver. This vulnerability can lead to a Denial of Service DoS through memory exhaustion. When recovering from a wireless firmware crash, the driver fails to free memory allocated for station statistics. An attacker or anomalous condition...

meltdown-exploit

POC DE EXPLOTACIÓN DE MELTDOWN Las optimizaciones especulativas ejecutan código de manera no segura dejando rastros de datos en la microarquitectura, como en la caché. Lipp et al. 2018 publicaron su código el 2018-01-09 en https://github.com/IAIK/meltdown. Consulte su artículo para más detalles:...

lmg

Linux Memory Grabber Un script para volcar la memoria de Linux y crear perfiles de VolatilityTM. Hal Pomeranz [email protected], 2020-02-01 ¡AGRADECIMIENTOS! "Si he visto más lejos es por estar sobre los hombros de gigantes." Issac Newton Hay muchas personas que merecen agradecimiento por...

VBA-RunPE

VBA RunPE Description A simple yet effective implementation of the RunPE technique in VBA. This code can be used to run executables from the memory of Word or Excel. It is compatible with both 32 bits and 64 bits versions of Microsoft Office 2010 and above. More info here:...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUERIDO -m |region|referenced|ioc -p |PID OPCIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

Security Advisory: Negative Chunk-Size Parsing Causes Memory Corruption in facil.io Assigned CVE ID : CVE-2026-66731 Product: facil.io Affected versions: facil.io = 0.7.5 0.7.5, 0.7.6, master; introduced when the 0.8.x HTTP/1.1 parser was backported in 0.7.5 - not present in 0.6.x or 0.7.0–0.7.3...

CVE-2026-98298

A flaw was found in the Linux kernel's MMP Peripheral Direct Memory Access PDMA driver. When preparing multi-entry scatter-gather lists for Direct Memory Access DMA transfers, the driver incorrectly reads the buffer length from the initial list entry rather than the active entry being processed. ...

keepass-password-dumper

Volcador de contraseña maestra de KeePass 2.X CVE-2023-32784 Actualización La vulnerabilidad fue asignada CVE-2023-32784 y corregida en KeePass 2.54. Gracias nuevamente a Dominik Reichl por su rápida respuesta y solución creativa. Aclaración: la contraseña debe escribirse en un teclado, no copiar...

CVE-2026-98296

A flaw was found in the Linux kernel's Intel PCIe Bluetooth driver. The driver fails to validate the size of outgoing transmission packets before copying them into a fixed Direct Memory Access DMA buffer. A local attacker could exploit this issue by submitting oversized packets, triggering a buff...

CVE-2026-98295

A flaw was found in the Linux kernel's Bluetooth subsystem. A local user can cause a Denial of Service DoS or memory corruption by disconnecting a Bluetooth device during an active diagnostic crash dump. Because the system fails to cancel pending dump tasks upon device unregistration, background...

CVE-2026-98292

A flaw was found in the Linux kernel's MediaTek Bluetooth drivers. The drivers fail to properly validate the length of incoming Wireless Management Task WMT event packets before accessing their data fields. A malicious or compromised device could transmit a truncated or malformed event, causing a...

CVE-2026-108683: Memory Allocation with Excessive Size Value

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-19739: Missing Release of Memory after Effective Lifetime

The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/llsw/ullllcpconnupd.c retains the received RX node while a Connection Update / Connection Parameter procedure waits for its instant, so the node can later carry the host notification llcprxnoderetain, which marks it...

CVE-2026-19740: Missing Release of Memory after Effective Lifetime

The Link Layer Control Procedure LLCP implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LLPHYUPDATEIND so that it can later be reused for the host notification when the update instant is reached llcprxnoderetain in...