unicorn

unicorn Escrito por: Dave Kennedy @HackingDave Sitio web: https://www.trustedsec.com Magic Unicorn es una herramienta sencilla para utilizar un ataque de downgrade de PowerShell e inyectar shellcode directamente en memoria. Basado en los ataques de PowerShell de Matthew Graeber y la técnica de...

CVE-2026-108683

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

pcileech

Resumen de PCILeech: PCILeech utiliza dispositivos de hardware PCIe para leer y escribir en la memoria del sistema objetivo. Esto se logra mediante el uso de DMA sobre PCIe. No se necesitan controladores en el sistema objetivo. PCILeech también funciona sin hardware junto con una amplia gama de...

pe-sieve

Introducción PE-sieve es una herramienta que ayuda a detectar malware en ejecución en el sistema, así como a recolectar el material potencialmente malicioso para su posterior análisis. Reconoce y vuelca una variedad de implantes dentro del proceso escaneado: PE reemplazados/inyectados, shellcodes...

CVE-2026-108683 zhayujie CowAgent Media Download memory allocation

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-108683 zhayujie CowAgent Media Download memory allocation

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

EUVD-2026-97039

A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation leads to uncontrolled memory allocation. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2026-108683

A security vulnerability exists in zhayujie CowAgent versions up to 2.1.9 . The flaw is located within an unknown function of the Media Download Handler component, where manipulation can lead to uncontrolled memory allocation . This issue can be exploited remotely, and the exploit has been disclo...

CVE-2026-108859

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll befor...

java-stager

java-stager Un Stager Java de PoC que puede descargar, compilar y ejecutar un archivo Java en memoria. Esto es solo para fines de investigación, no lo uses donde no estés autorizado. ¿Qué es esto? Esto se basa en el trabajo de James Williams de su charla "Next Gen AV vs My Shitty Code" disponible...

columbo

Columbo Columbo es una herramienta de análisis forense informático utilizada para simplificar e identificar patrones específicos en conjuntos de datos comprometidos. Descompone los datos en secciones pequeñas y utiliza reconocimiento de patrones y modelos de aprendizaje automático para identifica...

EUVD-2026-97010

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll befor...

CVE-2026-108859 mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll befor...

CVE-2026-108859 mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversized POST bodies. Attackers can send arbitrarily large or many concurrent POST requests, read fully via io.ReadAll befor...

CVE-2026-108859

The mcp-go library (versions through 1.2.1 ) is vulnerable to a Denial of Service (DoS) attack within the StreamableHTTPServer.ServeHTTP component. The root cause is unbounded POST body buffering , where the application uses io.ReadAll to read request bodies fully before performing any validation...

CVE-2026-108755

Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Attackers can send arbitrarily large or concurrent request bodies to POST /api/v1/sns/tenant/event with any UUID, which...

CVE-2026-108749

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-108748

Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /chat/routes endpoint that allows unauthenticated remote clients to exhaust server memory. Attackers can send repeated CONNECT frames reusing one chatId, leaving orphaned scope...

CVE-2026-108750

OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers can upload a small ODT, DOCX, or XLSX file whose XML entries decompress to hundreds of megabytes, crashing PHP workers...

CVE-2026-108714

MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB...