ShadowMem

ShadowMem: حماية وكلاء LLM من التهديدات طويلة المدى عبر الذاكرة الظلية يحتوي هذا المستودع على الإصدار الرسمي من الشيفرة الخاصة بالورقة البحثية Safeguarding LLM Agents against Long-Horizon Threats via Shadow Memory. ShadowMem هو إطار دفاعي يحافظ على ذاكرة وكيلية مخصصة ومركّزة على السلامة — مستوحاة...

elfloader

सारांश elfloader ELF फ़ाइलों के लिए एक अत्यंत सरल लोडर है जो ELF का एक फ्लैट इन-मेमोरी प्रतिनिधित्व उत्पन्न करता है। इसे Rust के साथ जोड़ें और अब आप अपने शेलकोड को एक उचित, सुरक्षित, उच्च-स्तरीय भाषा में लिख सकते हैं। LLVM द्वारा लक्षित किया जा सकने वाला कोई भी लक्ष्य इस्तेमाल किया जा सकता है,...

EUVD-2026-94978

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

CVE-2026-107612

GlavSoft TightVNC Server for Windows versions prior to 2.8.88 contains an incorrect permission assignment in its inter-process communication (IPC) mechanism. The software creates a shared memory segment in the *Global* namespace with a NULL DACL , allowing local authenticated users to read or ove...

CVE-2026-107611

GlavSoft TightVNC Viewer for Windows before version 2.8.88 is vulnerable to an out-of-bounds read in its ZRLE decoder . The issue occurs because the readPaletteRleTile() and readPackedPaletteTile() functions fail to validate attacker-supplied indices against the declared palette size. A malicious...

EUVD-2026-94975

An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyond the palette allocation and crash the viewer by sending ZRLE-encoded tiles whose palette indices exceed the declared...

EUVD-2026-94972

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to out-of-bounds memory access caused by a strict-weak-ordering violation in a sorting comparator...

CVE-2026-15819

The IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to an out-of-bounds write . This issue is caused by a strict-weak-ordering violation within a sorting comparator, which could allow a remo...

CVE-2025-14847

CVE-2025-14847 بيئة ثغرة CVE-2025-14847 مع PoC https://jira.mongodb.org/browse/SERVER-115508 الملخص هذا إصلاح حرج لمعالجة CVE-2025-14847. قم بالترقية إلى 8.2.3 أو 8.0.17 أو 7.0.28 أو 6.0.27 أو 5.0.32 أو 4.4.30. وصف المشكلة وتأثيرها استغلال من جانب العميل لتطبيق zlib الخاص بالخادم يمكن أن يُرجع...

EUVD-2026-94963

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write...

CVE-2026-16163

The IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are susceptible to an out-of-bounds write vulnerability. This flaw allows a remote attacker to trigger memory corruption , which can lead to a high impac...

CVE-2026-16163 IBM DataPower Gateway Out-of-bounds Write

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. طبّق التصحيحات الموجودة في مجلد host-patches على مضيف Linux وQEMU. 2. شغّل جهازًا افتراضيًا بتقنية SEV-SNP. 3. شغّل الكود في هذا المستودع وانتظر رسالة "waiting for the hypervisor to change memory to MMIO". 4. أرسل أمر attack بشكل متكرر في QEMU عدة مرات. 5. بمجرد أن يكتشف...

CVE-2026-44034

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

CVE-2026-16176

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation...

CVE-2025-7771

CVE-2025-7771 — قراءة/كتابة الذاكرة الفيزيائية العشوائية عبر ThrottleStop.sys إثبات مفهوم كامل لبرنامج تشغيل ThrottleStop.sys الخاص بـ TechPowerUp CVE-2025-7771. برنامج تشغيل نواة موقّع وقابل للتحميل لا يزال يعرض قراءة وكتابة غير مُتحقَّق منها للذاكرة الفيزيائية عبر اثنين من IOCTLs. يحوّل هذا...

CVE-2025-54939

PoC لـ QUIC-LEAK CVE-2025-54939 في LSQUIC نظرة عامة يسلط هذا PoC الضوء على CVE-2025-54939، وهو ثغرة استنزاف للذاكرة قبل المصافحة رفض الخدمة في تطبيق LSQUIC لبروتوكول QUIC. المشكلة، المسماة QUIC-LEAK، تم توثيقها لأول مرة بواسطة Imperva:...

cve_2023_38831_scanner

CVE-2023-38831 स्कैनर अवलोकन CVE-2023-38831 स्कैनर एक उन्नत साइबरसुरक्षा उपकरण है जो WinRAR स्थापनाओं में CVE-2023-38831 भेद्यता की उपस्थिति का पता लगाने और विश्लेषण करने के लिए डिज़ाइन किया गया है। यह परियोजना भेद्यता का पता लगाने के लिए एक बहु-स्तरीय दृष्टिकोण लागू करती है, जिसमें फ़ाइल अखंडता...

EUVD-2026-94891

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation...

CVE-2026-16176

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a denial of service (DoS) attack. The root cause is improper validation of the length field during memory reallocation (CWE-770). A remote ...