36 matches found
NullSection
NullSection NullSection は、セクションヘッダーをヌルバイトで上書きする手法を適用するアンチリバースツールです。 インストール root@kitploit: git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection 利点 任意のELF（.ko ルートキットなど）に対して nullsection を実行すると、その後 Ghidra/IDA で ELF...
elfpack
ElfPack: ELFバイナリセクションドッキングによるステージレスペイロード配信 ハイライト ペイロードバンドリングメカニズムの概要：コンパイル、リンク、ロード。 バイナリ互換性と、配信メカニズムに対する疎結合ペイロードの作成。 セクションの自動メモリロードの回避。 構造化セクションタイプの使用。 ELFセクションを介したフィールド内ペイロードの（再）ローダーへのアタッチ。独自のペイロードを持ち込む。 分離されたプリコンパイル済みELFセクションによるシグネチャ回避。 ペイロード生成パイプラインによるローダーへのドライブバイペイロードアタッチメント。...
DEBIAN-CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
UBUNTU-CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781
A null pointer dereference in the ELF Section Handler component of GNU Binutils 2.47 , specifically in the function elf_x86_64_common_section_index within bfd/elf64-x86-64.c, allows a local attacker with low privileges to crash the application, resulting in low availability impact . The exploit i...
CVE-2026-91781 GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
CVE-2026-91781 GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...
PT-2026-91902
A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf x86 64 common section index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit...
CVE-2026-90829
A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfdelfsetgroupcontents of the file bfd/elf.c of the component SHTGROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been...
CVE-2026-62958
A vulnerability in Libriscv allows the attacker to crash the sandbox using an Out of Bounds Read. To create Bad elf: root@kitploit: python3 poc.py samplefile poisonedfile Results: root@kitploit: ❯ python3 poc.py fib poisonedfile Manipulating .text section header at offset 0x250 Manipulating .symt...
UBUNTU-CVE-2026-89556
In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...
CVE-2026-89556 module: validate string table section types
In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In elfvaliditycachesechdrs, section sizes and offsets are validated, unless the section type is SHTNULL or SHTNOBITS. Later, elfvaliditycachesecstrings and elfvaliditycacheindexstr acce...
gdb: Fix of CVE-2019-1010180
CVE-2019-1010180: add warning for corrupt ELF section size larger than file...
CLSA-2026-1777308938 gdb: Fix of CVE-2019-1010180
CVE-2019-1010180: add warning for corrupt ELF section size larger than file...
CLSA-2026-1776693427 Fix CVE(s): CVE-2019-1010180
SECURITY UPDATE: buffer overflow when ELF section size is invalid - debian/patches/CVE-2019-1010180.patch: reject ELF sections whose recorded size exceeds the file size - CVE-2019-1010180...
CLSA-2025-1766586503 binutils: Fix of CVE-2025-11083
CVE-2025-11083: fix corrupt ELF section header handling...
