314 matches found
wmi-static-spoofer
wmi-static-spoofer Motivation: The initial motivation is bypassing HWID detection methods used by intrusive software like anti-cheats, etc. or licensing restrictions implemented in software. The concept is not new but other solutions require a loaded driver at all times and a kernel hook with...
VMInjector
V M I n j e c t o r c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description: VMInjector is a to...
inception
注: このツールは現在活発に開発されていません。代わりに PCILeech を参照してください。 INCEPTION Inception は、PCI ベースの DMA を悪用する物理メモリ操作・ハッキングツールです。このツールは、FireWire、Thunderbolt、ExpressCard、PC カード、その他の PCI/PCIe ハードウェアインターフェースに対して攻撃できます。 Inception は、DMA を使用して稼働中のコンピュータに対して侵襲的・非侵襲的なメモリハックを実行する、 比較的 高速で安定した、簡単かつ拡張可能な方法を提供することを目的としています。 動作原理...
ScareCrow
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of ScareCrow or to submit an issue, reference https://github.com/Tylous/ScareCrow. ScareCrow More Information If you want to learn more about the techniques utilized in this framework please take a look at Part 1 and Part 2 Description...
CVE-2026-98034
A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. This flaw allows a local user to achieve privilege escalation by submitting a specially crafted eBPF program. Because the verifier fails to properly track register precision when writing to kernel pointers, it...
PYSEC-2026-1782 Picklescan does not block ctypes
Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge issue. ctypes is basically a foreign function interface library and can be used to Load DLLs Call C functions directly Manipulate memory raw pointers. This can allow attackers to achieve RCE by invoking direct...
CVE-2026-6241: Use of Externally-Controlled Format String
An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitization. An attacker can inject format specifiers into ONVIF scope parameters to manipulate memory...
php: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability
A flaw was found in PHP's SOAP extension. This vulnerability allows a remote attacker to execute arbitrary code on the affected system. The issue stems from a use-after-free error in the object deduplication mechanism, which can be triggered by sending a specially crafted SOAP request. This allow...
JLSEC-2026-335
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MMrealloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to th...
Exploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.Sys
CVE-2015-2291-Spoofer Overview of a application that I reverse...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from direct manipulation of shared memory, which could lead to information disclosure or integrity corruption...
CVE-2025-54065 GZDoom engine allows arbitrary code execution via ZScript actor states
GZDoom is a feature centric port for all Doom engine games. GZDoom is an open source Doom engine. In versions 4.14.2 and earlier, ZScript actor state handling allows scripts to read arbitrary addresses, write constants into the JIT-compiled code section, and redirect control flow through crafted...
📄 macOS 18.3.2 VM_BEHAVIOR_ZERO_WIRED_PAGES Handling
A vulnerability exists in the way macOS handles VMBEHAVIORZEROWIREDPAGES combined with mmap + mlock + vmdeallocate on a read-only mapped file. A local attacker may trigger abnormal kernel behavior depending on system conditions. This proof of concept is purely academic and demonstrates a controll...
ASUS Armoury Crate 安全漏洞
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from an improperly restricted memory buffer manipulation vulnerability that can be exploited by an attacker to cause a local elevation...
EUVD-2005-0011
Malware in sbrugna...
EUVD-2020-20283
Malware in sbrugna...
EUVD-2008-5877
Malware in sbrugna...
EUVD-2018-3756
Malware in sbrugna...