177 matches found
qiling
Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...
hotpatch-for-apache-log4j2
Log4jHotPatch これは、実行中のJVMプロセスにJavaエージェントを注入するツールです。エージェントは、ロードされたすべてのorg.apache.logging.log4j.core.lookup.JndiLookupインスタンスのlookupメソッドをパッチし、常に文字列"Patched JndiLookup::lookup"を返すようにします。これは、Javaプロセスを再起動せずにLog4jのリモートコード実行脆弱性CVE-2021-44228を解決するために設計されています。このツールはCVE-2021-45046も対処します。 これは現在、Linux上のJDK...
patched-bash-4.3
patched-bash-4.3 patched-bash-4.3 para CVE-2014-6271 Esto es simplemente bash 4.3, descargado del sitio web de GNU y parcheado con los parches disponibles el 26/9/2014, incluidos los cambios de funcionalidad de pkgsrc que desactivan por completo la absurda "ejecución de funciones en variables de...
CVE-2010-3971-hotpatch
CVE-2010-3971-hotpatch Crea tu propio hotfix de seguridad con Deviare. Artículo original: uso de Deviare para crear un parche temporal de día cero...
CVE-2026-85656
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
EUVD-2026-71619
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
CVE-2026-85656 OS command injection in Amazon log4j-cve-2021-44228-hotpatch
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
CVE-2026-85656
CVE-2026-85656 is an OS command injection vulnerability in the log4j-cve-2021-44228-hotpatch package in Amazon Linux versions before 1.3-9 . A local user with low privileges can execute arbitrary commands with root privileges by leveraging embedded newline characters in a Java process's executabl...
CVE-2026-85656: Improper Neutralization of Special Elements used in an OS Command
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
PT-2026-86208
CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package 1.3-9. Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this https://t.co/USqzEPbRQs CVE valtersit CVEAlert infosec SysAdmin cybersecurit...
August 11, 2026—Hotpatch KB5120228 (OS Build 26100.33222)
None None...
August 11, 2026—Hotpatch KB5120994 (OS Builds 26200.9106 and 26100.9106)
None None...
Important: log4j-cve-2021-44228-hotpatch
Issue Overview: An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters. CVE-2026-85656 Affecte...
Amazon Linux 2 : log4j-cve-2021-44228-hotpatch (ALAS-2026-3784)
The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.3-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3784 advisory. An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might...
The vulnerability of the Windows Hotpatch Monitoring Service, a monitoring service for Windows operating systems, allows a perpetrator to increase their privileges.
The vulnerability of the Windows Hotpatch Monitoring Service in operating systems lies in its buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2026-42910
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42910
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...