shadow

shadow :: De Mysteriis Dom jemalloc shadow は jemalloc ヒープエクスプロイトフレームワークです。jemalloc をヒープアロケータとして使用するターゲットアプリケーション（Android の libc、Firefox、FreeBSD の libc、スタンドアロン jemalloc など）に非依存になるように設計されています。現在のバージョン 2.0 は以下のターゲットで広範囲にテストされています。 Android 6-9 libc ARM32 および ARM64 Firefox x86 および x86-64 on Windows およ...

cve-2011-3026-firefox

cve-2011-3026-firefox Black Hat 2012 발표에서 소개한, FirefoxLinux/x86에서 CVE-2011-3026을 악용하는 예제: "jemalloc 메모리 할당자 악용하기: Firefox 힙 장악하기" 원본 슬라이드 자료는 다음에서 확인할 수 있습니다: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis 업데이트된 슬라이드 자료:...

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG 없는 Redis RCE 비공개 단일하게 조작된 RESTORE 하나로 jemalloc Redis에서 동작하는 신뢰할 수 있는 원격 코드 실행 — DEBUG 명령 없이, /proc 없이, gdb 없이, ROP 없이, ASLR이 켜진 상태에서도 동작합니다. 공격자의 명령을 redis 프로세스 권한으로 실행합니다기본 이미지에서는 root. 🔒 비공개 저장소 — 승인된 보안 연구 / 사전 공개 조정 전용. 재배포하지 마십시오. 이 버그는 업스트림에서 수정되었습니다6.2.22 / 7.2.14 /...

Astra Linux - Redis Vulnerability

Redis is an open-source, in-memory database that persists data to disk. The redis-cli command-line tool and the redis-sentinel service may be vulnerable to an integer overflow when parsing specially crafted large multi-bulk network replies. This is due to a vulnerability in the underlying hiredis...

Astra Linux – Vulnerability in Redis

A heap overflow issue was discovered in Redis versions prior to 5.0.10, before 6.0.9, and before 6.2.0, when using a heap allocator other than jemalloc or glibc’s malloc function. This issue could lead to out-of-bound writing or the crash of the process. Essentially, this flaw does not affect the...

RLSA-2026:64824 Important: redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

RockyLinux 9 : redis (RLSA-2026:64824)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64824 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data lis...

Important: redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

ALSA-2026:64824 Important: redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

CVE-2025-60021: Improper Neutralization of Special Elements used in a Command

Remote command injection vulnerability in heap profiler builtin service in Apache bRPC all versions 1.15.0 on all platforms allows attacker to inject remote command. Root Cause: The bRPC heap profiler built-in service /pprof/heap does not validate the user-provided extraoptions parameter and...

Mozilla Thunderbird < 31.3

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 31.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory. - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX 10.10CVE-2014-1595...

Mozilla Firefox ESR < 31.3

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 31.3. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory. - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX 10.10CVE-2014-1595...

Mozilla Firefox < 34.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 34.0. It is, therefore, affected by a vulnerability as referenced in the mfsa2014-90 advisory. - jemalloc poisoning plus Apple uninitialized variable usage triggers keylogging in /tmp/ on OSX 10.10CVE-2014-1595...

A look at an Android ITW DNG exploit

Posted by Benoît Sevens, Google Threat Intelligence Group Introduction Between July 2024 and February 2025, 6 suspicious image files were uploaded to VirusTotal. Thanks to a lead from Meta, these samples came to the attention of Google Threat Intelligence Group. Investigation of these images show...

[SECURITY] Fedora 43 Update: rust-tikv-jemalloc-sys-0.6.1-1.fc43

Rust FFI bindings to jemalloc...

[SECURITY] Fedora 43 Update: rust-tikv-jemallocator-0.6.1-1.fc43

A Rust allocator backed by jemalloc...

[SECURITY] Fedora 42 Update: rust-tikv-jemalloc-sys-0.6.1-1.fc42

Rust FFI bindings to jemalloc...

[SECURITY] Fedora 41 Update: rust-tikv-jemalloc-sys-0.6.1-1.fc41

Rust FFI bindings to jemalloc...

EUVD-2007-6710

Malware in sbrugna...

PT-2026-3235

Apache bRPC and Affected Versions Apache bRPC versions prior to 1.15.0 Description Apache bRPC contains a remote command injection flaw in the heap profiler built-in service. The /pprof/heap endpoint does not properly validate the extra options parameter, allowing attackers to execute arbitrary...