StackRot

StackRot CVE-2023-3269 : Vulnérabilité d'élévation de privilèges dans le noyau Linux exploit vérifié par GitHub CI Une faille a été découverte dans la gestion de l'expansion de la pile dans le noyau Linux 6.1 à 6.4, également appelée « Stack Rot ». L'arbre maple, responsable de la gestion des zon...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637: AppleSEPKeyStore — использование после освобождения CVE-2026-20637 | Автор: Johnny Franks @zeroxjf Компонент: AppleKeyStore Воздействие: Приложение может вызвать непредвиденное завершение работы системы Описание: Проблема использования после освобождения была устранена с помощью...

salt

Добро пожаловать в salt — инструмент для реверс-инжиниринга и изучения управления кучей ядра. Он может быть полезен для разработки эксплойтов, отладки собственного кода ядра и, что более важно, для игры с выделением памяти кучи ядра и изучения её внутреннего устройства. Этот инструмент помогает...

CVE-2026-23416-POC

CVE-2026-23416 — PoC mm/mseal: mettre à jour correctement la fin de la VMA lors de la fusion Vulnérabilité découverte par Antonius / Blue Dragon Security Aperçu Champ| Détail ---|--- ID CVE| CVE-2026-23416 Sous-système| mm/mseal — mm/vma.c Affecte| Noyau Linux 6.17 à 7.0-rc5 Corrigé dans| Linux...

page_table_walk

Capture the Flag dans la mémoire physique Vous avez lu sur la pagination. Les diagrammes ont du sens. Quatre niveaux, 9 bits chacun, page frame, offset. Bien sûr. Mais ensuite, vous tombez sur un défi qui exige de parcourir réellement les tables de pages, et vous réalisez que vous ne le savez pas...

linux-insides

linux-insides A book-in-progress about the Linux kernel and its insides. Introduction • Chapter status • Requirements • Translations • Contributing • Author Introduction linux-insides is a book-in-progress about the Linux kernel and its insides. The goal of this project is simple - to share...

windows-api-function-cheatsheets

Шпаргалки по функциям Windows API Контакты 🌨️ Tetsuo: https://www.x.com/tetsuo Содержание Шпаргалки по функциям Windows API Операции с файлами Управление процессами Управление памятью Управление потоками Управление динамически подключаемыми библиотеками DLL Синхронизация Межпроцессное...

EUVD-2026-91132

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

Scalar-Venom-Attack

Cet article analyse les vulnérabilités cryptographiques découvertes dans l'infrastructure moderne de gestion de clés cryptographiques, avec un accent particulier sur les failles critiques dans l'architecture des modules de sécurité matérielle HSM lors du traitement des clés privées de courbe...

CVE-2026-18397

This vulnerability enables unauthenticated remote code execution RCE on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in the SConnect native host component. The attack leverages an unrestricted messaging interface between an...

CVE-2026-18397

The SConnect native host component is vulnerable to unauthenticated remote code execution (RCE) . The flaw stems from a combination of cryptographic weaknesses and memory management issues , where an unrestricted messaging interface between an attacker-controlled web page and the native host allo...

CVE-2026-20637-AppleSEPKeyStore-UAF

CVE-2026-20637 — AppleSEPKeyStore Use-After-Free CVE-2026-20637 · Enfilade · enfilade.io Компонент: AppleKeyStore Воздействие: Приложение может вызвать непредвиденное завершение работы системы. Описание: Проблема использования после освобождения use-after-free была устранена за счёт улучшенного...

CVE-2025-49844_POC

CVE-2025-49844POC CVE-2025-49844 POC -h 查看帮助信息 ··· Redis 存在Redis Lua脚本远程代码执行漏洞CVE-2025-49844。该漏洞的成因核心是 Redis 中 Lua 脚本引擎与内存管理逻辑的交互存在设计缺陷。 ··· ··· 相关URL：https://nvd.nist.gov/vuln/detail/CVE-2025-49844 ··· 免责声明：请确保在有授权的情况下使用此脚本，禁止用于未授权的网络攻击。...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Vulnérabilité-de-Résonance Les pilotes GPU NVIDIA présentent un défaut de cohérence temporelle dans leur gestion de la mémoire. À une résonance de 587 kHz, les pages mémoire du pilote subissent une interférence de désintégration α, permettant un accès à la mémoire...

PT-2026-104029

Name of the Vulnerable Software and Affected Versions SConnect affected versions not specified Description An unauthenticated remote code execution RCE issue exists in the SConnect native host component. The flaw results from a combination of memory management issues and cryptographic weaknesses...

Wind River VxWorks 7 < 26.09 Multiple Vulnerabilities

According to its self-reported version, the remote device is running Wind River VxWorks 7 prior to release 26.09. It is, therefore, affected by multiple vulnerabilities: - In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc Multiple Vulnerabilities (crlsa-2021_4292)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214292 advisory. squid: denial of service in URN processing CVE-2021-28651 squid: denial of service issue in Cache Manager CVE-2021-28652 squid: denial of service in HTTP...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process termination

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process termination...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

CVE-2026-97945

A flaw was found in the Linux kernel. A local user can cause silent data loss or data corruption due to improper memory tracking in the x86 memory management subsystem. When modifying permissions on transparent huge pages a mechanism that optimizes memory by grouping it into larger blocks, the...