105 matches found
FlavorTown
FlavorTown Verschiedene Möglichkeiten, Shellcode auszuführen. C: Geschrieben/Getestet mit einem leeren Projekt in VS 2022. C: Getestet mit VS 2022 und csc. MATLAB: Getestet mit MATLAB 2023a. Diese Skripte benötigen MATLAB, um ausgeführt zu werden. Verwendung: Die Verwendung ist am Anfang jeder...
PowerShell-Suite
PowerShell-Suite Im Internet gibt es großartige Tools und Ressourcen, um nahezu jede Aufgabe in PowerShell zu bewältigen. Manchmal ist es jedoch erforderlich, ein Dienstprogramm für einen bestimmten Zweck zusammenzustellen oder eine ontologische Lücke zu schließen. Dies ist eine Sammlung von...
SharpWMI
SharpWMI SharpWMI è un'implementazione in C di varie funzionalità WMI. Include query WMI locali/remote, creazione remota di processi tramite win32process ed esecuzione remota di VBS arbitrari attraverso sottoscrizioni a eventi WMI. Sono supportate anche credenziali alternative per i metodi remoti...
QLOG
Update Juli 2022 Wir haben QLOG als Experiment gestartet, um mehr über Windows ETW zu lernen. QLOG bietet erweitertes Logging für Prozesserstellungsereignisse unter Windows. Wir haben die Entwicklung von QLOG eingestellt, weil inzwischen kostenlose Tools veröffentlicht wurden, die ETW für...
process_overwriting
Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...
kemon
Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...
CVE-2026-68187
A flaw was found in the Linux kernel's exec subsystem, specifically within the transferargstostack function. A local user could provide a specially crafted argument or environment string during process creation, causing an unsigned loop counter to wrap. This leads to an out-of-bounds read and...
CVE-2026-11346
A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...
CVE-2025-47407
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2026-11346
The CVE-2026-11346 entry concerns a Server-Side Request Forgery (SSRF) in the custom process creation feature of linQI. An authenticated user can craft a process containing an HTTP Request component to force the server to issue arbitrary HTTP requests, enabling internal-network probing by observi...
CVE-2026-11346 Server-Side Request Forgery (SSRF) allowing Internal Network Probing in linqi
A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...
EUVD-2026-34825
A Server-Side Request Forgery SSRF vulnerability in the custom process creation feature of linqi allows an authenticated attacker to probe internal network components. By crafting a specific process containing an HTTP Request component, an attacker can force the server to send arbitrary HTTP...
Linqi 安全漏洞
Linqi is an English speaking practice platform developed by the German company Linqi. Linqi has a security vulnerability, which stems from a server-side request forgeing vulnerability in the custom process creation function. This vulnerability allows authenticated attackers to detect internal...
EUVD-2026-28723
In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Handle vfork/CLONEVM correctly Matthieu and Jiri reported stalls where a task endlessly loops in mmgetcid when scheduling in. It turned out that the logic which handles vfork'ed tasks is broken. It is invoked when th...
CVE-2025-47407
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2025-47407
CVE-2025-47407 describes a memory corruption in the DSP service during process creation caused by an allocation failure at the kernel level, linked to a TOCTOU race condition. Connected records identify a kernel-level allocation failure as the underlying trigger and the DSP service as the affecte...
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
