CVE-2026-25267 Missing Authorization in Core

Memory corruption when non-secure loader rewrites page tables before secure memory initialization...

CVE-2026-25267

A memory corruption vulnerability exists in the Core component due to a non-secure loader rewriting page tables before the secure memory initialization process begins. This flaw, categorized under CWE-862 (Missing Authorization) , could result in high impacts on confidentiality, integrity, and av...

MAL-2026-17636 Malicious code in hardhat-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f570102756d04aa466677488cd13aacac2eb941176523bc4ff024d214affbb The npm package hardhat-init presents itself as Hardhat initialization tooling and ships a README, LICENSE, and index.d.ts copied from the pino logge...

Malicious code in hardhat-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f570102756d04aa466677488cd13aacac2eb941176523bc4ff024d214affbb The npm package hardhat-init presents itself as Hardhat initialization tooling and ships a README, LICENSE, and index.d.ts copied from the pino logge...

CVE-2023-4911

CVE-2023-4911 "Looney Tunables" 的 PoC 这是 CVE-2023-4911（又称 "Looney Tunables"）的 PoC，利用的是 glibc 动态加载器解析 GLIBCTUNABLES 环境变量的函数 parsetunables 中的一个漏洞。 该代码已在 Ubuntu 22.04.3、glibc 版本 2.35-0ubuntu3.3 上测试通过。我们未尝试对该 PoC 进行泛化（也就是说："在我的机器上能跑"），因此你的实际体验可能会有所不同。 和往常一样，非常感谢 Qualys 威胁研究部门 发现该漏洞，并撰写了 非常详细的分析报告。 由...

CVE-2026-105742

A flaw was found in docling. This vulnerability can lead to information disclosure of sensitive credentials, such as API keys and session tokens. When remote image fetching is enabled, the HTML image loader fails to restrict custom request headers to the document's original domain. A remote...

PT-2026-106723

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT ConvertTrack to read pas...

PT-2026-106345

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when a non-secure loader rewrites page tables before the secure memory initialization process is completed. Recommendations At the momen...

AlmaLinux 9 : gimp (ALSA-2026:75575)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75575 advisory. gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file CVE-2026-90947 gimp: gimp: heap-based buffer overflow in ICO loader vi...

PT-2026-107238

A heap-based buffer overflow was found in GIMP’s DirectDraw Surface DDS loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written throu...

Analysis-for-stage1-shellcode-loader-from-hacking-

来自 Hacking Team 的 stage1 shellcode 加载器分析 代码流程图 网络 IoC https://172\.20\.20\.164 Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; MDDRJS 感染 IoC（释放的文件） 2s5s7k8w8b4i.dat...

@graphql-tools/prisma-loader (>=8.0.0-alpha-20230517123108-df347e95, <=8.0.17-alpha-20241113142246-527bbf8c4e20af3d172439ab4746fe676b3a61c5), @graphql-tools/url-loader (>=8.0.0-alpha-20230517123108-df347e95, <=9.1.8-rc-20260907155438-70f93ec122ac510059d67d2c95fa983767d228e4) +1 more potentially affected by CVE-2026-103921 via @graphql-tools/executor-legacy-ws (>=1.0.0-alpha-20230517123108-df347e95, <=1.1.34-rc-20260907155438-70f93ec122ac510059d67d2c95fa983767d228e4)

@graphql-tools/executor-legacy-ws NPM version =1.0.0-alpha-20230517123108-df347e95, =8.0.0-alpha-20230517123108-df347e95, =8.0.0-alpha-20230517123108-df347e95, =9.1.8-rc-20260907155438-70f93ec122ac510059d67d2c95fa983767d228e4 - graphql-config 5.0.0-alpha-20230519081831-037f0ba Source cves:...

CVE-2023-4911

CVE-2023-4911 这是针对 CVE-2023-4911（"Looney Tunables"）的概念验证代码，它利用了 glibc 动态加载器中 GLIBCTUNABLES 环境变量解析函数 parsetunables 的一个 bug。 这是将 C 语言的概念验证代码重写为纯 Python 实现。我这样做是为了更轻松地为其他平台定制漏洞利用代码。 唯一的依赖是 pwntools，可以通过以下方式安装： python3 -m pip install --upgrade pwntools 原始 C...

CVE-2026-105742

The docling library (versions 2.95.0 through 2.132.0 ) contains a vulnerability in the HTML image resource loader located at docling/backend/utils/image_resource_loader.py. When enable_remote_fetch=True and fetch_images=True are set, the loader forwards custom headers—such as API keys and cookies...

CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource loader in docling/backend/utils/imageresourceloader.py forwards headers configured through the HTMLBackendOptions.heade...

CVE-2023-4911-PoC

GNU C 库的动态加载器漏洞（CVE-2023-4911） 概述 GNU C 库（glibc）是 GNU 系统中的 C 库，也是基于 Linux 的系统不可或缺的组成部分。glibc 核心定义了程序所需的基本功能，包括系统调用以及 open、malloc、printf 和 exit 等常用函数。动态加载器作为 glibc 的关键组件，通过管理共享库并在运行时进行链接，在程序的准备和执行中发挥着重要作用。 GLIBCTUNABLES 环境变量 GLIBCTUNABLES 环境变量旨在让用户无需重新编译即可在运行时修改 glibc...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hexadecimal numbers or similar elements. However,...

Astra Linux – Vulnerability in Chromium

Incorrect reference resolution in the Loader component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through crafted network traffic. Chromium security severity: Medium...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: efi/capsule-loader: corrected incorrect allocation size gcc-14 notes that the allocation using sizeofvoid on 32-bit architectures is insufficient for a 64-bit physaddrt: drivers/firmware/efi/capsule-loader.c: In the function...

ReflectiveDLLInjection

关于 反射式DLL注入是一种库注入技术，它利用反射式编程的概念，将库从内存加载到宿主进程中。因此，该库通过实现一个最小的可移植可执行文件（PE）加载器来负责自身的加载。它可以在与宿主系统和进程进行最小交互的情况下，控制自身如何加载以及与宿主交互。 该注入技术适用于从Windows NT4到Windows 8（含）的系统，并在适用的x86、x64和ARM架构上运行。 概述 将库远程注入进程的过程分为两步。首先，您希望注入的库必须被写入目标进程（下文称为宿主进程）的地址空间。其次，该库必须以满足其运行时预期的方式加载到宿主进程中，例如解析其导入表或将其重定位到内存中的合适位置。...