CVE-2026-104713

The Apache Struts REST plugin is vulnerable to an allocation of resources without limits or throttling (CWE-770) because it reads request bodies into memory without any size bounds. An attacker can send a large request body to cause the server to exhaust the Java heap , resulting in a denial of s...

EUVD-2026-92624

Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accepted, so a single request can cause the server to allocate memory in proportion to its size, exhausting the Java heap a...

CVE-2026-58854

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58854

CVE-2026-58854 identifies a memory corruption vulnerability caused by type confusion in multiple locations. This flaw could enable local escalation of privilege without requiring additional execution privileges or user interaction. No specific software, versions, or remediation details are provid...

EUVD-2026-92615

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55269

A memory safety issue exists in the FilterCapturedPacket function of snoop_logger.cc due to improper input validation . This vulnerability could allow for a local escalation of privilege without requiring additional execution privileges or user interaction. Specific details regarding the affected...

EUVD-2026-92607

In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55269

In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access

A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to re...

Important: Red Hat Security Advisory: libpcap security update

An update for libpcap is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers

A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...

bouncycastle: BC-JAVA: unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpg. A specially crafted PGP AEAD Authenticated Encryption with Associated Data message with an unbounded chunk size can lead to an excessive consumption of memory. This issue allows an unauthenticated remote attacker to cause memory...

netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak

A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the DelegatingDecompressorFrameListener class. This resource leak could lead to an Out Of Memory Error OOME, potentially causing a Denial of Service DoS by taking down th...

CVE-2026-93323

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

mboxshell

mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...

AceLdr

AceLdr - 메모리 스캐너 회피 Cobalt Strike를 위한 위치 독립적 리플렉티브 로더입니다. Hunt-Sleeping-Beacons, BeaconHunter, BeaconEye, Patriot, Moneta, PE-sieve, MalMemDetect에서 0건의 결과를 반환합니다. 기능 사용하기 쉬움 쉘코드를 생성하기 전에 단일 CNA 스크립트를 가져오세요. 동적 메모리 암호화 Beacon에서 할당된 모든 항목에 대해 새 힙을 생성하고 절전 전에 항목을 암호화합니다. 코드 난독화 및 암호화 CS 실행 코드를 포함하는...

bitlocker-bypass-research

BitLocker 우회 연구 CVE-2023-21563BitPixie을 사용하여 BitLocker 전체 디스크 암호화를 우회하는 개인 보안 연구 프로젝트입니다. 개요 2025년 10월, BitLocker가 활성화된 기업용 노트북에 대해 물리적 노트북 복구 평가를 수행했습니다. 직원이 비밀번호를 잊었고 복구 키도 사용할 수 없었습니다. 알려진 취약점CVE-2023-21563을 사용하여 메모리에서 VMKVolume Master Key를 추출하고, BitLocker를 우회하여 시스템에 대한 전체 액세스 권한을 복구했습니다. 사용된 ...

CVE-2022-21894

baton drop CVE-2022-21894: 보안 부팅 보안 기능 우회 취약점 Windows 부트 애플리케이션은 truncatememory 설정을 사용하여 메모리 맵에서 직렬화된 데이터의 "영구" 범위를 포함하는 메모리 블록을 제거하여 보안 부팅 우회를 초래합니다. truncatememory BCD 요소는 지정된 물리적 주소 위의 모든 메모리를 메모리 맵에서 제거합니다. 이는 각 부트 애플리케이션 초기화 중, 메모리에서 직렬화된 보안 부팅 정책을 읽기 전에 수행됩니다. 따라서 이러한 요소를 사용하여 직렬화된 보안 부팅 정책...

r77-rootkit

r77 Rootkit Fileless ring 3 rootkit r77 is a ring 3 rootkit that hides everything: Files, directories Processes & CPU/GPU usage Registry keys & values Services TCP & UDP connections Junctions, named pipes, scheduled tasks Hiding by prefix Everything that starts with "$77" is hidden. Configuration...

CVE-2022-20186

CVE-2022-20186 익스플로잇 라이트업은 여기에서 확인할 수 있습니다. 이는 2022년 1월에 제가 보고한 Arm Mali 커널 드라이버의 버그입니다. 이 버그를 이용하면 신뢰할 수 없는 앱 도메인에서 임의의 커널 코드 실행 권한을 얻을 수 있으며, 이를 통해 SELinux를 비활성화하고 루트 권한을 획득할 수 있습니다. 익스플로잇은 Google Pixel 6에서 테스트되었으며 2021년 11월부터 2022년 2월까지의 패치 레벨을 지원합니다. 몇 가지 이미지 오프셋만 변경하면 다른 펌웨어에 대한 지원을 쉽게 추가할 수...