EUVD-2026-93802

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2015-6620-POC

CVE-2015-6620-POC-1 POC для одной из ошибок в CVE-2015-6620-1 ANDROIDID-24123723, произвольная запись при демаршалинге AMessage. Две ошибки объединены в один CVE, и здесь представлен POC для одной из них. Объяснение 533 sp AMessage::FromParcelconst Parcel &parcel 534 int32t what = parcel.readInt3...

CVE-2019-16279

CVE-2019-16279 （CVE-2019-16279）dos Cette faille exploite une erreur mémoire lors de l'envoi d'un trop grand nombre de \r\n dans une seule connexion. Exemple $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1...

CVE-2025-5777

CVE-2025-5777 - PoC утечки памяти Citrix NetScaler 📌 Описание Этот скрипт эксплуатирует критическую уязвимость раскрытия памяти в устройствах Citrix NetScaler ADC/Gateway, известную как CVE-2025-5777 также называемую CitrixBleed 2. Он вызывает утечку памяти через конечную точку...

Blackbone

Blackbone Bibliothèque de hacking mémoire Windows Fonctionnalités Prise en charge x86 et x64 Interaction avec les processus Gérer PEB32/PEB64 Gérer les processus à travers la barrière WOW64 Mémoire des processus Allouer et libérer de la mémoire virtuelle Modifier la protection mémoire Lire/Écrire...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Конфиденциальность, драйверы и строки памяти Анализ памяти setup.exe дроппера с помощью Process Hacker показывает, что Lumma Stealer нацелен на настройки конфиденциальности, устанавливает драйверы и управляет памятью. Ключевые наблюдаемые строки: Privacy Camera – Попытка доступа к...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

linux_screenshot_xwindows

Introduction L'objectif de ce plugin volatility est d'extraire une capture d'écran de toutes les fenêtres X ouvertes à partir d'un dump mémoire. Travaux antérieurs Le plugin volatility linuxxwindows réalisé par Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extrait diverses métadonné...

vaas-cve-2014-0160

Уязвимость как сервис - CVE 2014-0160 Система Debian Wheezy Linux с уязвимой версией libssl и openssl и веб-сервер для демонстрации CVS-2014-0160, также известного как Heartbleed. Обзор Этот docker-контейнер основан на Debian Jessie и был изменён для использования уязвимой версии libssl и openssl...

CVE-2026-106114

ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirming that the profile contains the declared values. IccDataReader.ReadClutF32 can request a large float array, and...

CVE-2026-106115

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

CVE-2026-106112

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

Inline-Execute-PE

Inline-Execute-PE AVERTISSEMENT : Ce projet est complexe et ne pas comprendre son fonctionnement ni le tester correctement peut entraîner le crash des Beacons et la perte d'accès ! Je vous encourage vivement à lire toute la documentation jusqu'à la section « Design Considerations and Commentary »...

XenoboxX

Kit de bac à sable matériel Les malwares utilisent fréquemment des techniques anti-VM, qui peuvent varier dans leur difficulté à détecter et contrecarrer. Bien que l'intégration de mesures anti-détection dans nos laboratoires soit une option fréquemment utilisée, nous devrions également envisager...

CVE-2026-80810

A flaw was found in the Linux kernel. An integer overflow vulnerability in the iouring/rsrc component, specifically within the iovecfillbvec function, can lead to incorrect memory calculations when handling very large memory pages. This error causes the kernel to access memory outside of its...

CVE-2026-80887

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

HandleKatz

HandleKatz Cet outil a été implémenté dans le cadre de notre conférence Brucon2021 et démontre l'utilisation de handles clonés vers Lsass afin de créer un dump mémoire obfusqué de celui-ci. Il se compile en un exécutable résidant entièrement dans son segment texte. Ainsi, le segment .text extrait...

CVE-2026-80841

A flaw was found in the Linux kernel's net/packet component, specifically within the AFPACKET transmission ring. This vulnerability occurs because virtual memory allocated for network packet handling is prematurely released while active network buffers socket kernel buffers, or skbs still hold...

CVE-2026-80780

A flaw was found in the Linux kernel's Human Interface Device HID pidff driver. A remote attacker, by plugging in a specially crafted malicious USB device, can trigger an out-of-bounds write in the hidpidffinitwithquirks function. This occurs because the function fails to validate if the input li...

CVE-2026-80848

A flaw was found in the xfrm: espintcp component of the Linux kernel. A race condition exists during the closure of espintcp sockets, where a memory buffer skb can be freed while still being accessed by another process. This Use-After-Free UAF vulnerability could allow a local attacker to cause...