CVE-2026-106231

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-106231

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-106215

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106215

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-76753

A format string vulnerability exists in an affected service interface of HPE Networking ClearPass Policy Manager . This flaw could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation of this vulnerability may lead to arbitrary code execution . No specific s...

EUVD-2026-93880

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

CredCrack

CredCrack ⛔ 已弃用。此仓库不再维护。请考虑使用 CrackMapExec。 简介 CredCrack 是一款快速且隐蔽的凭据收集工具。它能递归地从内存中以明文形式窃取凭据。任务完成后，CredCrack 会解析并输出凭据，同时识别所获取的域管理员账户。此外，CredCrack 还具备列出和枚举共享访问的能力，并且支持多线程！ CredCrack 已在 Kali Linux 原生工具环境下测试通过。它仅依赖于 PowerSploit 的 "Invoke-Mimikatz.ps1" 文件，需放在 /var/www 目录下。点击此处下载 Invoke-Mimikatz 帮助...

CVE-2026-8053-MongoDB

CVE-2026-8053 — MongoDB Server 越界写入 概述 属性| 值 ---|--- CVE 编号| CVE-2026-8053 技术名称| FlatBSON 重复字段索引漂移 漏洞类型| CWE-787 — 越界写入 CVSS v4.0| 8.7 高 CVSS v3.1| 8.8 高 EPSS| 0.064% 第 20 百分位 — 利用概率低 KEV 已知被利用| 未记录 发现日期| MongoDB 内部 公开日期| 2026-05-12 保留日期| 2026-05-06 NVD 状态| 已发布 / 等待分析 详细描述 根本原因 漏洞存在于 MongoDB Serv...

swapgs-attack-poc

PoC para el ataque SWAPGS CVE-2019-1125 Este repositorio contiene las fuentes del PoC del ataque SWAPGS mostrado públicamente en Black Hat USA, 2019. Contenido leakgsbkva - variante 1 busca valores aleatorios en la memoria del kernel; limitado a la cabecera de la imagen del kernel PE leakgsbkvat ...

EUVD-2026-93874

Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...

EUVD-2026-93980

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

CVE-2026-76745 Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...

CVE-2026-76745

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker . Successful exploitation of these vulnerabilities could allow an attacker to achieve Remote Code Execution (RCE) . The provided documents do not specify the exact component, root cause, or...

EUVD-2026-93979

Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code...

YAMA-dev

YAMA 又一款用于恶意软件检测的内存分析器 概念 YAMA 是一个用于生成扫描器的系统，可在应急响应期间检测特定恶意软件。YAMA 生成的扫描器专为探索 Windows 操作系统内存并检测恶意软件而设计。随着仅驻留在内存中的无文件恶意软件日益增多，YAMA 旨在通过检测此类恶意软件来促进事件处理中的快速响应。 特性 生成作为单个二进制文件运行的扫描器 使用 YARA 规则和内存信息检测恶意软件 通过编写自定义 YARA 规则，为每个用户的应急响应需求创建恶意软件检测二进制文件 以文本/JSON 格式输出检测结果 扫描器的工作原理 YAMA 扫描器作为 Windows...

Memory-analysis

内存分析 包含用于在内存中执行恶意软件和取证分析的工具。 插件： Dyrescan.py - 解析内存中的 Dyreconfig。 Rat9002.py - 解析内存中的 9002 rat 配置。 plugx.py - 解析内存中的 plugx 配置（已修改，同时解析配置大小：0x170c）。 ghostrat.py - 解析内存中的 ghostrat 配置。 分析脚本： volanalysis.sh - 使用 volatility 自动化分析的脚本 commonsearchstrings.txt - 由 volanalysis.sh...

xwf-yara-scanner

概述 此 X-Ways Forensics X-Tension 允许在 X-Ways 中原生使用 YARA。它同时使用 X-Ways Forensics API 和 YARA API 来实现这一点。 注意：这是一个开源项目，并非正式的 CrowdStrike 产品。 在 X-Ways 中运行 YARA 相比通过命令行界面运行 YARA 有许多好处。 无需挂载目标介质，X-Tension 将读取案例快照中的每个文件到内存中并在那里进行扫描。没有文件写入磁盘。 允许用户使用 X-Ways 中的强大过滤器来限制 YARA 扫描的范围。 由于 X-Tension 利用 X-Ways...