CVE-2026-98382

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS by triggering an out-of-bounds memory read. When handling device-bound programs, improper validation allows a program intended for one...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

ssh-tpm-agent

Agent SSH pour TPM ssh-tpm-agent est un agent compatible ssh-agent qui permet de créer des clés via le module de plateforme de confiance TPM pour l'authentification auprès de serveurs SSH. Les clés scellées par TPM sont des clés privées créées à l'intérieur du module de plateforme de confiance TP...

DumpBrowserSecrets

DumpBrowserSecrets Extrait les données stockées dans les navigateurs telles que les jetons d'actualisation, les cookies, les identifiants enregistrés, les cartes de crédit, les saisies automatiques, l'historique de navigation et les marque-pages des navigateurs modernes basés sur Chromium et Geck...

ChromeKatz

ChromeKatz ChromeKatz est une solution pour extraire des informations sensibles depuis la mémoire des navigateurs basés sur Chromium. Pour l'instant, ChromeKatz se compose de trois projets : 1. CookieKatz - Le dumper de cookies 2. CredentialKatz - Déprécié.. pour l'instant 3. ElevationKatz -...

Chrome-App-Bound-Encryption-Decryption

ChromElevator Chrome App-Bound Encryption Decryption 🚀 Présentation Un outil de post-exploitation démontrant un contournement complet, en mémoire, du chiffrement App-Bound Encryption ABE de Chromium. Ce projet utilise le Process Hollowing Réflexif basé sur des Syscalls Directs Direct Syscall-base...

ZeroCrumb

ZeroCrumb Extraction des identifiants et cookies protégés par App Bound sans privilèges. Explication ZeroCrumb contourne le service Chrome Elevation en usurpant l'identité d'une instance de Chrome à l'aide du Transacted Hollowing, ce qui nous permet d'utiliser l'interface COM IElevator pour...

CVE-2024-29943

CVE-2024-29943 Un bug JIT SpiderMonkey de Pwn2Own : de l'incohérence de plage d'entiers à l'élimination des vérifications de bornes, puis RCE. Ce dépôt contient le PoC, l'exploit et les diapositives d'analyse pour CVE-2024-29943. Démo Demo.mp4 Diapositives Slides.pdf Informations pour la...

DumpChromeSecrets

!IMPORTANT Этот проект больше не поддерживается. Вместо него используйтеDumpBrowserSecrets, который поддерживает Chrome, Edge, Brave, Firefox, Opera, Opera GX и Vivaldi. DumpChromeSecrets Извлечение данных из современных версий Chrome, включая refresh-токены, куки, сохранённые учётные данные,...

kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

sdk

@cosignet/sdk عميل TypeScript رفيع، خالٍ من التبعيات، لـ Cosignet — موافقة بإشراف بشري لإجراءات وكلاء الذكاء الاصطناعي عالية المخاطر، مع توقيعات مفتاح المرور المرتبطة بالحمولة. ضع إنساناً في الحلقة قبل تنفيذ إجراء خطير: أوقفه، احصل على موافقة صريحة بمفتاح مرور من شخص Face ID / Touch ID / Windows...

CVE-2026-84854

The WibuKey driver for Windows versions below 6.72 contains an out-of-bounds write vulnerability due to insufficient validation of user input when calculating the size of a kernel buffer. This flaw could lead to a system crash or, under unfavorable circumstances, the modification of adjacent kern...

CVE-2026-84854 Out of Bound Write on WibuKey for Windows

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...

CVE-2026-84854 Out of Bound Write on WibuKey for Windows

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent...

CVE-2026-98362

In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS index in scpidvfsrecalcrate dvfsgetidx may return an out-of-range index if the SCP firmware is buggy or returns a stale value. Only negative indexes were rejected, so a large index walked past info-opp...

kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: qlogic/qede: fixed a potential out-of-bounds read in qedetpacont and qedetpaend. The loops in ‘qedetpacont’ and ‘qedetpaend’ iterate over ‘cqe-lenlist’, using only a zero-length terminator as the stopping condition. If the...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contains a “Out of Bound Read” issue in the xrdpmmtransprocessdrdynvcchannelclose function. There are no known solutions to this problem. Users are advis...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed a slab-out-of-bounds Read in dtSearch Currently, when searching for the current page in the sorted entry table of the page, there is an out-of-bound access. A bound check has been added to fix this error. Dave: The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: jfs: fixed an array-index-out-of-bounds read in addmissingindices. stbl is an s8 type, but it must contain offsets into slots that can range from 0 to 127. A bound check was added for this error, and the error -EIO is returned if...