kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

CVE-2025-22457-vulnserver-lab

step 1 environment setting 권한 & 실행 스크립트 Windows를 사용하는 경우 wsl을 열어 실행할 수 있습니다 chmod +x setupenvironment.sh ./setupenvironment.sh step 2: 동적 값 찾기 수동 단계 필요 메모리 주소와 IP는 환경마다 동적으로 변하기 때문에 수동으로 찾아서 exploit.py 스크립트를 업데이트해야 합니다. 2.0 먼저 attacker docker 두 개와 victim docker 하나를 열어 이후 준비를 합니다 docker exec -it...

Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis

1. x32dbg – 암호화된 구성 복호화 및 메모리 할당 x32dbg 메모리 덤프는 Formbook이 구성 데이터를 복호화하고 NtAllocateVirtualMemory를 사용하여 해당 데이터를 위한 메모리를 할당한다는 것을 보여줍니다. 주요 관찰 사항: NtAllocateVirtualMemory – 복호화된 페이로드를 위한 메모리를 할당합니다. mov edx, dword ptr ds:esi+1C – ESI 레지스터에서 암호화된 데이터의 크기를 가져옵니다. push 0x1000 – MEMCOMMIT을 사용하여 메모리를...

CVE-2026-98357

A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER target driver. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to memory corruption. During connection teardown, background tasks process deferred control messages...

K000163580: Elasticsearch vulnerability CVE-2026-56149

Security Advisory Description Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

kernel: nvmet-auth: reject short AUTH_RECEIVE buffers

A flaw was found in the nvmet-auth component of the Linux kernel. A remote attacker, by sending a specially crafted AUTHRECEIVE buffer to an NVMe-oF NVM Express over Fabrics target with in-band authentication enabled, can trigger a heap out-of-bounds write. This vulnerability arises because the...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

ROOT-OS-ALPINE-321-CVE-2026-3805 CVE-2026-3805 in curl - Patched by Root

Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

RLSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

RLSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

libpcap security update

An update is available for libpcap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpcap packages provide a portable framework for low-level network...

CVE-2026-106453

A flaw was found in lz4-java. The library trusts the decompressed length header in compressed input before validating the input data, leading to uncontrolled memory allocation. A remote attacker can exploit this vulnerability by supplying a specially crafted input that specifies an excessively...

CVE-2026-106452

A flaw was found in lz4-java. A remote attacker can trigger a Denial of Service DoS by providing a crafted compressed data stream with an oversized block header. During decompression, the input stream allocates memory based on this attacker-controlled size field before reading the actual payload,...

CVE-2026-106450

A flaw was found in lz4-java. By supplying a specially crafted stream containing many small frame headers, a remote attacker can trigger disproportionate memory allocations during decompression. This excessive allocation consumes substantial memory and processing resources, potentially leading to...

CVE-2014-0160

CVE-2014-0160 Heartbleed를 사용하여 웹앱 메모리 유출을 위한 실습 랩 구축 이 저장소는 Heartbleed 기술을 사용하여 nginx를 악용할 수 있는 쉬운 환경을 구축하는 데 중점을 둡니다. Docker를 사용한 환경 구축 서버 설정 다이어그램 데모 단계 서버 다이어그램 CVE-2014-0160 문제는 OpenSSL 라이브러리가 TLS 하트비트 기능의 버퍼 크기를 64KB로 제공하여 메모리 오버플로우를 일으켜 서버 메모리의 민감한 정보가 누출될 때 발생합니다. 공격 흐름 heartbleed.py 페이로드 ...

Filedumper

FileDumper - 메모리 포렌식 덤퍼 FileDumper v1.0.1 프로세스 메모리 영역에서 파일을 직접 덤프하는 간단하고 강력한 도구입니다. 인간의 독창성 과 AI의 창의성 이 늦은 밤 협력하여 탄생했습니다 — xAI의 Grok + Kadir Isbirligi 2026 "한밤중에 이야기하고, 코드를 작성하고, 주먹으로 책상을 내리쳤습니다... 인간 + AI = 무한한 힘!" 이 도구는 무엇인가요? FileDumper는 Windows 기반 메모리 포렌식 도구로 다음 작업을 수행할 수 있습니다: 활성 프로세스 나열 프로세...

K000163576: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-52911 In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn-binding slowpath to bound sessions only When the binding SESSIONSETUP sets conn-binding = true, the flag stays set after the call so that the global session lookup in...