169 matches found
qiling
Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...
hotpatch-for-apache-log4j2
Log4jHotPatch 이 도구는 실행 중인 JVM 프로세스에 Java 에이전트를 주입하는 도구입니다. 에이전트는 로드된 모든 org.apache.logging.log4j.core.lookup.JndiLookup 인스턴스의 lookup 메서드를 패치하여 무조건 문자열 "Patched JndiLookup::lookup"을 반환하도록 시도합니다. 이 도구는 Java 프로세스를 재시작하지 않고 Log4j의 CVE-2021-44228 원격 코드 실행 취약점을 해결하기 위해 설계되었습니다. 이 도구는 CVE-2021-45046도 함께...
patched-bash-4.3
patched-bash-4.3 patched-bash-4.3 for CVE-2014-6271 This is just bash 4.3 , pulled from the gnu website, and patched with the patches available on 9/26/2014, including the pkgsrc functionality changes that just disable the silly "execute functions in env variables" altogether. The patches are als...
CVE-2010-3971-hotpatch
CVE-2010-3971-hotpatch Do you own security hotfix with Deviare. Original article: using Deviare to create a temporary zero day patch...
CVE-2026-85656
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
EUVD-2026-71619
An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters...
CVE-2026-85656
CVE-2026-85656 is an OS command injection vulnerability in the log4j-cve-2021-44228-hotpatch package in Amazon Linux versions before 1.3-9 . A local user with low privileges can execute arbitrary commands with root privileges by leveraging embedded newline characters in a Java process's executabl...
PT-2026-86208
CVE-2026-85656: OS command injection in Amazon Linux's log4j hotpatch package 1.3-9. Local user can execute arbitrary commands as root via crafted Java process path with newlines. CVSS 7.8. Unpatched! If you rely on this https://t.co/USqzEPbRQs CVE valtersit CVEAlert infosec SysAdmin cybersecurit...
August 11, 2026—Hotpatch KB5120228 (OS Build 26100.33222)
None None...
August 11, 2026—Hotpatch KB5120994 (OS Builds 26200.9106 and 26100.9106)
None None...
Important: log4j-cve-2021-44228-hotpatch
Issue Overview: No CVE associated with this advisory Affected Packages: log4j-cve-2021-44228-hotpatch Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update...
Amazon Linux 2 : log4j-cve-2021-44228-hotpatch, --advisory ALAS2-2026-3784 (ALAS-2026-3784)
The version of log4j-cve-2021-44228-hotpatch installed on the remote host is prior to 1.3-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3784 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...
CVE-2026-42910
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42910
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
...
EUVD-2026-35576
Out-of-bounds write in Windows Hotpatch Monitoring Service allows an authorized attacker to elevate privileges locally...
CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
...
CVE-2026-42910
CVE-2026-42910 describes an out-of-bounds write in Windows Hotpatch Monitoring Service that enables a locally authenticated attacker to elevate privileges. According to the records, the impact is local with high severity (CVSS v3.1: AVLOCAL, ACLOW, PRLOW, UI NONE, S U, C I A H). The exploitation ...
