CVE-2026-106202

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource flaw within the ANGLE component. A remote attacker can exploit this by using a crafted HTML page to read memory outside the sandbox . No specific exploit information or web applicability details ar...

CVE-2026-106376

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93804

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93801

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106258

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a memory corruption issue caused by an uninitialized resource in the ANGLE component (CWE-908). A remote attacker can exploit this vulnerability by using a crafted HTML page to read memory outside the sandbox . No specific ...

CVE-2026-106215

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a High severity flaw involving an uninitialized resource in the ANGLE component (CWE-908). A remote attacker can leverage a crafted HTML page to trigger the flaw, resulting in the ability to read memory outside the sandbox ...

CVE-2026-106376

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource issue within the ANGLE component. A remote attacker can leverage a crafted HTML page to read memory outside the sandbox . The Chromium security severity is rated as High . No specific exploit infor...

EUVD-2026-93802

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

BOF_RunPe

BOFRunPE BOF RunPE 是一个用于 Cobalt Strike 的 Beacon 对象文件，可在 beacon 进程内完全在内存中执行 PE 文件。与传统的 fork&run 不同，不会生成子进程，不会创建控制台，也不会使用管道 ——所有输出均通过 IAT 挂钩捕获并重定向到 beacon 控制台。 架构： 仅 x64 概述 ┌──────────────────────────────────────────────────────────────┐ │ Cobalt Strike Beacon │ │ Current Process │...

YourMemory

YourMemory 你的AI的记忆就像金鱼一样。不再如此。 为AI代理打造的持久、自我改进的记忆——基于人类记忆科学构建。 ▶ 尝试在线交互演示 · 网站 · 基准测试 问题 每天早晨，你的AI代理都像对待陌生人一样对待你。同样的上下文要重新解释。同样的偏好被遗忘。每次会话都从零开始。 大多数“记忆”工具只是将向量数据库附加到代理上，然后称之为完成——但这只是存储 。它堆积着几乎重复的内容，直到检索被噪音淹没。一个容量更大的金鱼缸而已。 YourMemory不同：像大脑一样工作的记忆，而非数据库。 flowchart LR A"🧠 你告诉你的AI某些事情" -- B"提取持久的事实" ...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC para un bug en CVE-2015-6620-1 ANDROIDID-24123723, escritura arbitraria al deserializar AMessage. Los dos bugs están fusionados en un solo CVE, y aquí está el POC para uno de ellos. Explicación 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what =...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）拒绝服务 该漏洞利用在单个连接中发送过多\r\n时的内存错误。 示例 $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080: Connection refused...

CVE-2025-5777

CVE-2025-5777 - Prueba de Concepto de Fuga de Memoria en Citrix NetScaler 📌 Descripción Este script explota una vulnerabilidad crítica de divulgación de memoria en los dispositivos Citrix NetScaler ADC/Gateway, identificada como CVE-2025-5777 denominada CitrixBleed 2. Provoca una fuga de memoria ...

intel-me-research

Ingeniería inversa del firmware de Intel ME — Análisis en vivo de CSME 16.x "Tu ordenador tiene un segundo ordenador secreto en su interior. Lo encontramos, lo mapeamos y documentamos lo que se esconde ahí dentro." 🔥 PRUÉBALO TÚ MISMO — HECI SPY 🔥 Un script de Python. Cero dependencias. Habla...

Blackbone

Blackbone Biblioteca de hacking de memoria de Windows Características Compatibilidad con x86 y x64 Interacción con procesos Gestionar PEB32/PEB64 Gestionar procesos a través de la barrera WOW64 Memoria de procesos Asignar y liberar memoria virtual Cambiar la protección de memoria Leer/Escribir...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Cadenas de Privacidad, Controladores y Memoria El análisis de memoria con Process Hacker del dropper setup.exe revela que Lumma Stealer apunta a configuraciones de privacidad, instala controladores y gestiona memoria. Cadenas clave observadas: Privacy Camera – Intenta acceder o...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

linux_screenshot_xwindows

简介 本 Volatility 插件的目标是从内存转储中提取所有打开的 X 窗口的屏幕截图。 先前工作 由 Adam Bridge（https://github.com/bridgeythegeek/linuxxwindows）实现的 Volatility 插件 linuxxwindows 提取了注册到 X 的窗口对象的各种元数据，这些元数据通过遍历 X 服务器的数据结构进行识别。例如，对于每个窗口，它会列出窗口坐标、宽度和高度尺寸以及窗口标识符。Adam 的 README 对这些细节有很好的讨论，如果您感兴趣，建议阅读！ 作为参考，这里有一张图展示了 X 的核心结构及其相互依赖关系： ...

vaas-cve-2014-0160

漏洞即服务 - CVE 2014-0160 一个基于 Debian Wheezy Linux 的系统，包含易受攻击版本的 libssl 和 openssl，以及一个用于展示 CVE-2014-0160（即 Heartbleed）的 Web 服务器。 概述 此 Docker 容器基于 Debian Jessie，并已修改以使用易受攻击版本的 libssl 和 openssl。 一个简单的静态网页通过 Apache 2 提供服务。 用法 使用 docker pull hmlio/vaas-cve-2014-0160 安装容器 使用端口映射运行容器：docker run -d -p...

CVE-2026-106114

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...