XenoScan

XenoScan XenoScan 은 프로세스의 메모리를 스캔하여 중요한 값의 특정 위치를 찾는 데 사용할 수 있는 메모리 스캐너입니다. 이러한 유형의 도구는 일반적으로 비디오 게임 해킹에 사용되며, 게임 상태를 나타내는 값을 메모리에서 찾을 수 있게 해줍니다. XenoScan 은 Lua 프론트엔드와 함께 C++로 작성되었으며, 제가 본 다른 메모리 스캐너에는 없는 고급 기능을 계속 개발하고 있습니다. 특히, 대상의 메모리 공간에 있는 모든 복잡한 데이터 구조예: std::list 및 std::map를 열거하고 반환하는 방법이...

resym

ReSym 아티팩트 이 저장소는 논문 "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024의 아티팩트를 제공합니다. 🏆 ACM SIGSAC Distinguished Paper Award 수상작 참고 : 저희는 아티팩트를 지속적으로 유지/업데이트하고 있습니다. 최신 버전을 사용 중인지 확인해 주시기 바랍니다. 제공 데이터 및 리소스 데이터 준비 스크립트 : processdata 폴더에 있습니다...

ShimMe

ShimMe DEFCON 32 프레젠테이션 "SHIM me what you got - 코드 주입을 위한 Shim 및 Office 조작"의 도구 Office Injector - OfficeClickToRun 서비스에서 RPC 메서드를 호출하여 작업 스케줄러 서비스가 시작한 일시 중단된 프로세스NT AUTHORITY\SYSTEM 권한으로 실행에 DLL을 주입하여, 관리자에서 SYSTEM으로 권한 상승을 달성합니다. Shim Injector - 문서화되지 않은 shim 데이터 구조를 다른 프로세스의 메모리에 기록하여, 시스템에 새...

EUVD-2026-84013

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

CVE-2026-17051: Out-of-bounds Write

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

PT-2026-96156

Name of the Vulnerable Software and Affected Versions Intel SEDI IPM affected versions not specified Description The Intel SEDI IPM driver contains an out-of-bounds write issue in the ipm event dispose function within drivers/ipm/ipm sedi.c. The driver processes inbound message interrupts by...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchipsaradc: fixed information leakage in the triggered buffer. The “data” local struct is used to push data to user space from a triggered buffer. However, it does not set values for inactive channels, as it only us...

Vulnerabilities of Cisco IOS XR operating systems, related to insufficient validation of message correctness or data structure, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Cisco IOS XR operating systems is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-89618

A flaw was found in the Linux kernel's eventfs component. When the eventfscreatedir function fails due to memory pressure, an uninitialized internal data structure can cause the system to issue a misleading warning during the cleanup process. This incorrect error reporting could lead to confusion...

EUVD-2026-70770

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...

PT-2026-79867

A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate to submit a request that causes a self-referential data structure to be created. Whe...

CVE-2026-72221

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

EUVD-2026-59419

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Resolve region deletion races Sungwoo noticed that the sysfs trigger to delete a region may try to delete a region multiple times. It also has no exclusion relative to the kernel releasing the region via CXL root devi...

Insertion of Sensitive Information Into Sent Data

Overview apache-airflow is a platform to programmatically author, schedule, and monitor workflows. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the UI display. An attacker can view sensitive variable values by accessing deeply nested dat...

UBUNTU-CVE-2026-68378

In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL pointer dereference in dpllmsgaddpinrefsync When a dpllpin is shared across multiple dplldevice instances and those devices are being unregistered e.g. during driver module removal, a NULL pointer dereference can...

CVE-2026-64529 crypto: qat - remove unused character device and IOCTLs

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

PT-2026-63413

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.18.11-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1 Description An issue occurs when th...