cve-2023-32784

CVE-2023-32784 KeePass 2.X ниже версии 2.54 подвержен уязвимости, при которой мастер-пароль может быть извлечён из дампа памяти разблокированной базы данных KeePass. Этой уязвимости присвоен идентификатор CVE-2023-32784 Эта программа предназначена для извлечения мастер-пароля из дампа памяти...

CVE-2023-32784-EXPLOIT-REPORT

Демонстрация эксплойта CVE-2023-32784 Обзор проекта Этот репозиторий предоставляет демонстрацию CVE-2023-32784, критической уязвимости, обнаруженной в KeePass версиях до 2.54. Эксплойт позволяет восстановить мастер-пароль через дампы памяти, раскрывая сохраненные учетные данные. В этой документац...

CVE-2023-32784-keepass-linux

KeePass 2.53/cmdline и сохранять pid тех, в аргументе командной строки которых есть ключевое слово KeePass. Затем он получит адреса отображений памяти в /proc//maps, которые не связаны напрямую с библиотекой, то есть имеют пустой путь к файлу. Затем он сохранит память всех этих отображений в буфе...

KeeFarceReborn

KeeFarce Reborn KeePass 프로세스에 주입되면 데이터베이스를 평문으로 내보내는 독립 실행형 DLL입니다. 훌륭한 KeeFarce, KeeThief 및 KeePassHax 프로젝트에서 많은 영감을 받았습니다. 또 하나의 KeePass 추출 도구, 왜? 몇 년 전, @denandz는 KeePass 데이터베이스를 평문으로 추출하도록 설계된 최초의 공격 도구인 KeeFarce를 출시했습니다. 이 도구는 실행 중인 프로세스에 DLL을 주입한 다음 ClrMD를 사용하여 힙을 탐색해 필요한 개체를 찾고 리플렉션을 통해...

KeePass-CVE-2023-32784-Exploitation-and-Defense

Уязвимость утечки памяти KeePass CVE-2023-32784: Архитектура эксплуатации и защиты Цель Проанализировать уязвимость CVE-2023-32784 в KeePass Password Safe v2.53, продемонстрировать извлечение мастер-пароля через дамп памяти и разработать надежные средства обнаружения и смягчения последствий...

CVE-2023-32784-password-combinator-fixer

🔒 CVE-2023-32784 Исправление комбинатора паролей ПОЛЕЗНО ДЛЯ МАШИНЫ KEEPER HTM После использования дампера паролей KeePass некоторые символы могут быть неверно распознаны как ●. Этот скрипт помогает определить реальные символы и эффективно исправить проблему. 🚀 🛠️ Как использовать 1. Запустите...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Содержит простое правило yara для поиска возможных скомпрометированных конфигурационных файлов KeePass Как использовать Используйте сканер правил yara, например yara, loki или thor-lite, для сканирования систем с помощью этого правила. Местоположение по умолчанию для...

Linux Distros Unpatched Vulnerability : CVE-2026-86776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a...

The vulnerability of the ReadHeaderField() function in the KeePass password manager’s password management function allows a hacker to cause a service failure.

The vulnerability of the ReadHeaderField function in the KeePass password manager is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially created KDBX file...

CVE-2026-86776

A flaw was found in KeePass. An attacker can craft a malicious KDBX file that declares excessively large header field lengths. When a user opens this file, the application attempts to allocate gigabytes of memory, leading to resource exhaustion and causing the application to terminate. This...

DEBIAN-CVE-2026-86776

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

CVE-2026-86776

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

CVE-2026-86776

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

UBUNTU-CVE-2026-86776

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

CVE-2026-86776

KeePass versions 2.35 through 2.61.1 are affected by a memory exhaustion vulnerability in the ReadHeaderField function. The root cause is a failure to validate KDBX header field sizes before performing memory allocation. An attacker can craft a malicious KDBX file declaring excessive header field...

CVE-2026-86776 KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

EUVD-2026-74788

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

CVE-2026-86776 KeePass 2.35 through 2.61.1 Memory Exhaustion via KDBX Header Field Size

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...

CVE-2026-86776

Removed by vendor...

PT-2026-88914

KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the ReadHeaderField function. Attackers can craft a malicious KDBX file declaring excessive header field lengths to trigger allocation of gigabytes of memory, causing the application to consu...