105 matches found
SharpWMI
SharpWMI SharpWMI est une implémentation en C de diverses fonctionnalités WMI. Cela inclut les requêtes WMI locales/distance, la création de processus WMI à distance via win32process, et l'exécution à distance de VBS arbitraire via les abonnements aux événements WMI. Les identifiants alternatifs...
FlavorTown
FlavorTown Vari modi per eseguire shellcode. C: Scritto/Testato utilizzando un progetto vuoto in VS 2022. C: Testato con VS 2022 e csc. MATLAB: Testato utilizzando MATLAB 2023a. Questi script richiedono MATLAB per essere eseguiti. Utilizzo: L'utilizzo è riportato come commento all'inizio di ogni...
PowerShell-Suite
PowerShell-Suite Im Internet gibt es großartige Tools und Ressourcen, um nahezu jede Aufgabe in PowerShell zu bewältigen. Manchmal ist es jedoch erforderlich, ein Dienstprogramm für einen bestimmten Zweck zusammenzustellen oder eine ontologische Lücke zu schließen. Dies ist eine Sammlung von...
QLOG
Update Juli 2022 Wir haben QLOG als Experiment gestartet, um mehr über Windows ETW zu lernen. QLOG bietet erweitertes Logging für Prozesserstellungsereignisse unter Windows. Wir haben die Entwicklung von QLOG eingestellt, weil inzwischen kostenlose Tools veröffentlicht wurden, die ETW für...
process_overwriting
Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...
kemon
Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...
CVE-2026-68187
A flaw was found in the Linux kernel's exec subsystem, specifically within the transferargstostack function. A local user could provide a specially crafted argument or environment string during process creation, causing an unsigned loop counter to wrap. This leads to an out-of-bounds read and...
CVE-2026-11346
A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...
CVE-2025-47407
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2026-11346
The CVE-2026-11346 entry concerns a Server-Side Request Forgery (SSRF) in the custom process creation feature of linQI. An authenticated user can craft a process containing an HTTP Request component to force the server to issue arbitrary HTTP requests, enabling internal-network probing by observi...
CVE-2026-11346 Server-Side Request Forgery (SSRF) allowing Internal Network Probing in linqi
A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...
EUVD-2026-34825
A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...
Linqi 安全漏洞
Linqi is an English speaking practice platform developed by the German company Linqi. Linqi has a security vulnerability, which stems from a server-side request forgeing vulnerability in the custom process creation function. This vulnerability allows authenticated attackers to detect internal...
EUVD-2026-28723
In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Handle vfork/CLONEVM correctly Matthieu and Jiri reported stalls where a task endlessly loops in mmgetcid when scheduling in. It turned out that the logic which handles vfork'ed tasks is broken. It is invoked when th...
CVE-2025-47407
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2025-47407
CVE-2025-47407 describes a memory corruption in the DSP service during process creation caused by an allocation failure at the kernel level, linked to a TOCTOU race condition. Connected records identify a kernel-level allocation failure as the underlying trigger and the DSP service as the affecte...
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
