CVE-2026-100503

Ghidra versions through 12.1.4 are affected by a heap use-after-free vulnerability within the decompiler's Funcdata::opInsertAfter function. The root cause is attributed to stale INDIRECT effect-op references . An attacker can trigger this vulnerability by providing a malicious binary containing ...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503: Use After Free

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

hwbp4mw

Este artículo fue originalmente para VX-Underground Black Mass Halloween Edition 2022. Motores de hooking: Motor de hooking hwbp x86/x64 seguro para subprocesos c Librería de breakpoints PAGEGUARD/hwbp c++20 Librería hwbp ejemplo DLL c++20 Técnica genérica de evasión en user-land x64 utilizando...

exec-prot-bypass

Bypass de Protección de Espacio Ejecutable CVE-2022-25265 Este POC demuestra la ejecución de bytes ubicados en una región supuestamente no ejecutable del binario, por lo tanto, evitando completamente la protección de espacio ejecutable. La causa raíz de esto se puede encontrar aquí:...

ropfuscator

Aviso legal ROPfuscator es una prueba de concepto de investigación y no está pensado para uso en producción. Los autores no asumen ninguna responsabilidad ni obligación por el uso del software. Se ruega actuar con precaución y utilizarlo bajo su propio riesgo. ROPfuscator ROPfuscator es un...

sc2elf

sc2elf Aplicación .NET Native AOT sencilla que utiliza LibObjectFile para convertir shellcode a ELF. Se admiten shellcode tanto de 32 bits como de 64 bits x86, x64 - el resultado es un ELF de 32 o 64 bits. Los Releases están compilados para linux-x64 y win-x64. Descripción Está compilado en forma...

retbleed-speculative-execution-poc

Retbleed: Ejecución Arbitraria de Código Especulativo mediante Desbordamiento del RSB Una reproducción práctica de Retbleed CVE-2022-29900 / CVE-2022-29901 — el ataque microarquitectónico de 2022 que rompió la defensa "Retpoline" al demostrar que las instrucciones ret, consideradas seguras durant...

AZL-104360 CVE-2026-97960 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

DEBIAN-CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

CVE-2026-97943

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm write lock on collapse to avoid UAF x86 implements page attribute modification using its Change Page Attributes CPA mechanism. This tracks properties of ranges such as cache mode through x86 page...

DEBIAN-CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

CVE-2026-97533

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire initmm read lock on attribute changes to avoid UAF A previous commit protected against races between ptdump and CPA collapse, however one still exists between attribute changes and collapse as reported by Deni...

DEBIAN-CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

CVE-2026-97525

In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Allocate split page tables as kernel page tables A PTE is allocated directly without going through the standard page table allocation routines such as ptealloconekernel when the CPA code splits a large page...

ghidra_stack_strings

Ghidra Stack-strings Un script para detectar stack-strings escritos por las instrucciones x86/x64 seleccionadas, emuladas mediante Unicorn. El script está escrito en Python 3, por lo que necesita Ghidrathon...

CVE-2026-97960 perf/x86/intel: Prevent drain_pebs() reentry

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

CVE-2026-97960

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...

EUVD-2026-86814

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drainpebs reentry The PEBS buffer is shared by all events on a CPU, so drainpebs must not be reentered. If so, one instance may observe stale buffer state and potentially access out-of-bound memory. Most...