CVE-2026-102411

Elasticsearch is vulnerable to a Denial of Service (DoS) via Excessive Allocation (CWE-770 ) due to a lack of memory throttling when retrieving multiple resources. While individual template resources have metadata size limits, the system fails to limit total memory usage during collective retriev...

CVE-2026-102404

A low-privileged authenticated user can trigger a Denial of Service (DoS) in Elasticsearch by submitting a specially crafted query. The vulnerability, classified as CWE-400 (Uncontrolled Resource Consumption) and CAPEC-130 (Excessive Allocation), causes uncontrolled memory growth in the query pro...

CVE-2026-102404 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memor...

DeepSleep

DeepSleep A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC. Huge thanks to @waldoirc for documenting large parts of this technique on his blog This implementation is different in that it does not make use of any APCs and is fully implemented as PIC. Description I have...

CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions

CVE-2026-28992: Condiciones de carrera en IOHIDFamily FastPathUserClient CVE-2026-28992 | Autor: Johnny Franks @0xjohnny Componente: IOHIDFamily Impacto: Un atacante podría provocar la finalización inesperada de una app Descripción: Una vulnerabilidad de corrupción de memoria fue corregida con un...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

CVE-2026-96580

The Gitea platform is vulnerable to memory exhaustion due to an uncontrolled resource consumption issue (CWE-400) within its Actions functionality. The vulnerability occurs because the system expands a workflow's static strategy.matrix into a full Cartesian product without a size limit when creat...

CVE-2026-98166

A flaw was found in the Linux kernel's DRM TTM Direct Rendering Manager Translation Table Manager subsystem. Due to an improper status check during memory swapout operations, swapped-out buffer resources are not properly untracked, leaving stale pointers referencing freed memory. A local user cou...

mojo-v

Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...

mojo-v

Mojo-V: Computación Secreta para RISC-V Mojo-V pronunciado “mojo-five” es una nueva extensión de RISC-V que introduce capacidades de programación orientadas a la privacidad para RISC-V. Mojo-V implementa computación secreta, lo que permite una ejecución segura, eficiente y oblivious a los datos s...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Aplica los parches de la carpeta host-patches al host Linux y a QEMU. 2. Inicia una VM SEV-SNP. 3. Ejecuta el código de este repositorio y espera el mensaje "waiting for the hypervisor to change memory to MMIO". 4. Ejecuta repetidamente el comando attack en QEMU varias veces...

CVE-2026-106424

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106399

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. Chromium security severity: Low...

CVE-2026-106395

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106386

Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-106386

Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106376

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106370

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106304

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106300

Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...