XenoScan

XenoScan XenoScan 은 프로세스의 메모리를 스캔하여 중요한 값의 특정 위치를 찾는 데 사용할 수 있는 메모리 스캐너입니다. 이러한 유형의 도구는 일반적으로 비디오 게임 해킹에 사용되며, 게임 상태를 나타내는 값을 메모리에서 찾을 수 있게 해줍니다. XenoScan 은 Lua 프론트엔드와 함께 C++로 작성되었으며, 제가 본 다른 메모리 스캐너에는 없는 고급 기능을 계속 개발하고 있습니다. 특히, 대상의 메모리 공간에 있는 모든 복잡한 데이터 구조예: std::list 및 std::map를 열거하고 반환하는 방법이...

resym

ReSym アーティファクト このリポジトリは、論文 "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024 のアーティファクトを提供します。 🏆 ACM SIGSAC Distinguished Paper Award 受賞 注意 : 当アーティファクトは積極的にメンテナンス・更新されています。最新バージョンを使用していることを確認してください。 提供されるデータとリソース データ準備スクリプト : processdata...

ShimMe

ShimMe DEFCON 32 トーク “SHIM me what you got - Manipulating Shim and Office for Code Injection” のツール群 Office Injector - OfficeClickToRun サービスの RPC メソッドを呼び出して、タスク スケジューラ サービスが起動した、NT AUTHORITY\SYSTEM として実行中の一時停止プロセスに DLL を注入し、管理者から SYSTEM への権限昇格を実現します。 Shim Injector - 非公開の shim...

EUVD-2026-84013

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchipsaradc: fixed information leakage in the triggered buffer. The “data” local struct is used to push data to user space from a triggered buffer. However, it does not set values for inactive channels, as it only us...

Vulnerabilities of Cisco IOS XR operating systems, related to insufficient validation of message correctness or data structure, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Cisco IOS XR operating systems is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-89618

A flaw was found in the Linux kernel's eventfs component. When the eventfscreatedir function fails due to memory pressure, an uninitialized internal data structure can cause the system to issue a misleading warning during the cleanup process. This incorrect error reporting could lead to confusion...

EUVD-2026-70770

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...

CVE-2026-72221

A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...

EUVD-2026-59419

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Resolve region deletion races Sungwoo noticed that the sysfs trigger to delete a region may try to delete a region multiple times. It also has no exclusion relative to the kernel releasing the region via CXL root devi...

Insertion of Sensitive Information Into Sent Data

Overview apache-airflow is a platform to programmatically author, schedule, and monitor workflows. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the UI display. An attacker can view sensitive variable values by accessing deeply nested dat...

UBUNTU-CVE-2026-68378

In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL pointer dereference in dpllmsgaddpinrefsync When a dpllpin is shared across multiple dplldevice instances and those devices are being unregistered e.g. during driver module removal, a NULL pointer dereference can...

CVE-2026-64529 crypto: qat - remove unused character device and IOCTLs

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

CVE-2026-10822

If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...

PT-2026-63413

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.18.11-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1 Description An issue occurs when th...

CVE-2026-63990 bonding: refuse to enslave CAN devices

In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtual CAN device vxcan is being enslaved to a bonding master. During the...

CVE-2026-13221

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perlstudychunk. When such branches are combined into a trie, the...

EUVD-2026-43503

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perlstudychunk. When such branches are combined into a trie, the delta between the first branch and the shared tail is stored ...