CredCrack

CredCrack ⛔ УСТАРЕЛО. Этот репозиторий больше не поддерживается. Пожалуйста, рассмотрите использование CrackMapExec. Введение CredCrack — это быстрый и скрытный сборщик учетных данных. Он рекурсивно извлекает учетные данные из памяти и в открытом виде. По завершении CredCrack анализирует и выводи...

CVE-2026-7482-PoC

CVE-2026-7482: Ollama ヒープ領域外読み取り（1-Day PoC） このリポジトリには、CVE-2026-7482 （Ollama の GGUF モデルローダー（0.17.1 より前のバージョン）における認証不要の領域外（OOB）読み取り脆弱性）に対する 1-Day Proof of Concept（PoC）エクスプロイトチェーンが含まれています。 注記: これは 1-Day リサーチによる再現です。私は元の CVE を発見したわけではありません。この PoC...

CVE-2026-78906-ChatGPT-Prompt-Injection

CVE-2026-78906 — PromptGhost ChatGPT API — 프롬프트 인젝션 및 메모리 유출 필드| 값 ---|--- 심각도| 8.7 높음 공격 경로| 네트워크 영향을 받는 버전| API v1.0 – v1.3 발견자| 𝕍𝕠𝕤𝕤🥷 설명 OpenAI ChatGPT API의 심각한 취약점으로, 공격자가 시스템 수준 제한을 우회하고 이전 대화 컨텍스트를 유출할 수 있는 악성 프롬프트를 주입할 수 있습니다. 영향 대화 기록에 대한 무단 접근 민감한 컨텍스트 유출 시스템 프롬프트 우회 데이터 유출 가능성 완화 방안 엄격한...

keepass-exfil-forensics

KeePass 메모리 유출 — 네트워크 포렌식 조사 실제 DFIR CTF 시나리오TryHackMe에서 사용된 hex → Base64 → XOR 난독화 체인을 역산하여 PCAP 트래픽에서 유출된 데이터를 복구한 다음, CVE-2023-32784 를 악용해 프로세스 메모리 덤프에서 KeePass 마스터 비밀번호를 곧바로 복구합니다. 한눈에 보는 공격 다이어그램 Victim workstation Attacker C2 Server ------------------- ------------------- Malicious .ps1...

CVE-2026-100387

pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...

CVE-2026-100387

The pgPointcloud extension, through version 1.2.5 , contains a heap out-of-bounds read vulnerability during dimensional patch WKB deserialization . Authenticated database users can exploit this by providing crafted pcpatch values with attacker-controlled size fields. This allows the attacker to r...

EUVD-2026-87324

pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...

JLSEC-2026-1268 Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list

The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...

PT-2026-80510

The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...

CVE-2026-5757

CVE-2026-5757 concerns Ollama’s model quantization engine. The CERT entry describes an unauthenticated remote information-disclosure vulnerability triggered via the model upload interface. Root cause: three factors—no bounds checking on user-supplied GGUF header metadata, unsafe memory access usi...

MAL-2026-5593 Malicious code in 0x2ai-demo6x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf57dfddd0bfd0def03360ae66ea88dd6d4e875cbcb42880a4277eb2d1df269a On npm install, scripts/postinstall.cjs recursively copies the package's payload/ directory into process.env.INITCWD the installer's project root,...

CVE-2026-40966

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

Spring AI's VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

CVE-2026-40966

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

EUVD-2026-26002

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

CVE-2026-40966

Spring AI vulnerability CVE-2026-40966: VectorStoreChatMemoryAdvisor allows cross-tenant exfiltration by injecting filter logic through a user-supplied conversationId, bypassing chat isolation. Affected: apps using VectorStoreChatMemoryAdvisor with conversationId from input. Impact: confidentiali...

CVE-2026-40966

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

CVE-2026-40966 VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

CVE-2026-40966 VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...

CVE-2026-40966 VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration

In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by injecting filter logic through conversationId. Only applications that use VectorStoreChatMemoryAdvisor and pass user-supplied input a...