CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

CVE-2026-77050 Potential denial-of-service vulnerability in get_supported_language_variant()

An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. django.utils.translation.getsupportedlanguagevariant is subject to a potential denial-of-service attack when processing many distinct, very long language codes, which are retained as keys in an in-memory...

CVE-2023-32784-kdbxpassdmp

keepassdumper.py Puerto en Python de vdohney/keepass-password-dumper CVE-2023-32784 — todo el crédito de la implementación original en C y de la técnica subyacente pertenece a vdohney. El script escanea un volcado de memoria de un proceso en busca de las cadenas de renderizado residuales que el...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Views in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

KeePass-dump-py

KeePass-dump-py Mi intento de reescribir el POC original de KeePass 2.X Master Password Dumper CVE-2023-32784 en python. Por favor, dirígete al POC original para más detalles sobre la vulnerabilidad y el proceso de explotación. Lo que hace este script: 1. Comprueba si el proceso de KeePass está e...

keepass-exfil-forensics

Exfiltración de Memoria de KeePass — Investigación de Forense de Red Recupera datos exfiltrados del tráfico PCAP revirtiendo una cadena de ofuscación hexadecimal → Base64 → XOR utilizada en un escenario real de DFIR CTF TryHackMe, y luego explota CVE-2023-32784 para recuperar la contraseña maestr...

AzTokenFinder

AzTokenFinder Es una pequeña herramienta para extraer JWT o datos que parecen JWT de diferentes procesos, como PowerShell, Excel, Word u otros. La idea se inspiró en el artículo del blog https://mrd0x.com/stealing-tokens-from-office-applications/ del increíble @mrd0x. En la nueva versión, añadí l...

truffleproc

truffleproc — caza secretos en la memoria de procesos Uso Ejecuta truffleproc.sh contra tu shell Bash actual p. ej., $$: $ ./truffleproc.sh $$ coredumping pid 6174 Reading symbols from od... Reading symbols from /usr/lib/systemd/systemd... Reading symbols from...

DMA-ProcessDumper

DMA-ProcessDumper Volca toda la memoria del proceso objetivo en modo usuario utilizando DMA con MemProcFS a través de un dispositivo FPGA PCIe Compilación Copia leechcore.h, vmmdll.h y vmm.lib desde MemProcFS al directorio DMA-ProcessDumper Compila usando Visual Studio Copia leechcore.dll, vmm.dl...

KeePass-CVE-2023-32784-Exploitation-and-Defense

Vulnerabilidad de fuga de memoria en KeePass CVE-2023-32784: Arquitectura de explotación y defensa Objetivo Analizar la vulnerabilidad CVE-2023-32784 en KeePass Password Safe v2.53, demostrar la extracción de la contraseña maestra mediante el volcado de memoria y diseñar controles robustos de...

CVE-2026-103764

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-83362

devalue: stringify/uneval serialize shared memory...

PT-2026-104057

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync (ALMALINUX9.6:CLSA-2026:1779466465)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779466465 advisory. - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, leading to disclosure of process memory...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1779369622)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779369622 advisory. - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is no...

EUVD-2026-88818

A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...

CVE-2026-102521: Out-of-bounds Read

The decoder in readFromDataView in lib0 before 0.2.119 can be tricked into reading more than it should from a buffer. The vulnerability allows reading past the decoders' view, thus exposing adjacent process memory. This can be anything that is currently in the head, for example credentials or log...