CVE-2018-19320-LPE

CVE-2018-19320 LPE 漏洞利用 描述 CVE-2018-19320 的本地权限提升漏洞利用。该漏洞利用使用了 gdrv.sys 中暴露的函数，允许低级别用户分配和写入内存数据，从而将权限提升至 SYSTEM。 截图 测试于: Windows 10 x64 21H1 OS Build 1903.1165 受影响版本 GIGABYTE APP Center v1.05.21 及更早版本 AORUS GRAPHICS ENGINE v1.33 及更早版本 XTREME GAMING ENGINE v1.25 及更早版本 OC GURU II v2.08 致谢 该漏洞由 Dieg...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 概要 CVE-2026-49975 は Apache HTTP Server における サービス拒否（DoS） 脆弱性です。 この脆弱性は HTTP/2 リクエスト処理パスで発生し、複数の cookie ヘッダーフィールドが LimitRequestFields...

CVE-2026-32941

Sliver C2 のフレームワーク全体に存在する脆弱性により、無制御のメモリ割り当て CWE-789 / CWE-400 を引き起こして、プロセス全体で Out-of-Memory OOM クラッシュを発生させる、認証不要のリモートサービス拒否 DoS が可能になります。 参照: Tenable 再現手順: 1. 認証情報の取得: 取得または生成された Sliver インプラントから mTLS 証明書と秘密鍵を入手します。 2. PoC の編集: mtlspoc.go を開き、var ブロック内のプレースホルダー値 c2Endpoint、clientCertPEM、clientKeyP...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

BlobRunner

BlobRunner BlobRunner は、マルウェア解析中に抽出されたシェルコードを迅速にデバッグするためのシンプルなツールです。 BlobRunner は対象ファイル用にメモリを割り当て、割り当てられたメモリのベース（またはオフセット）にジャンプします。これにより、アナリストは最小限のオーバーヘッドと手間で抽出されたアーティファクトをすばやくデバッグできます。 BlobRunner を使用するには、リリースページ からコンパイル済みの実行ファイルをダウンロードするか、以下の手順で自分でビルドしてください。 ビルド 実行ファイルのビルドは簡単で、比較的手間はかかりません。...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

Linux Distros Unpatched Vulnerability : CVE-2026-83745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both...

Linux Distros Unpatched Vulnerability : CVE-2026-94633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affect...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

AZL-105953 CVE-2026-83745 affecting package thrift 0.24.0-1

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-82458

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-83745

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-83745

A vulnerability exists in Apache Thrift before version 0.25.0 affecting the Node.js and D lang bindings. The issue stems from WebSocket server transports reading the payload length from the frame header and immediately allocating that memory without verifying if the bytes have actually arrived. T...

CVE-2026-83745 Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

EUVD-2026-91580

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-83745 Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...

CVE-2026-82458

A flaw was found in Apache Thrift. Multiple language bindings fail to properly restrict memory allocation when processing input containing excessive size values. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted requests, consuming available memory and...

CVE-2026-82458 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...

CVE-2026-82458

The Apache Thrift framework is vulnerable to a Denial of Service (DoS) condition in multiple language bindings, including Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin, and D . The root cause is a failure to properly restrict memory allocation when processing input containing excessi...

CVE-2026-82458 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available

Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...