CVE-2025-60791

CVE-2025-60791 CVE-2025-60791: メモリ内の機密情報の平文保存。 Easywork Enterprise 2.1.3.354 は、メモリ内の機密情報の平文保存に対して脆弱です。このアプリケーションは、アクティベーションの試行が失敗した後も、デバイスに紐付けられた有効なライセンスキーをプロセスメモリ内に残します。このキーは、デバッガを接続するか、プロセス/メモリダンプを解析することで取得でき、その後、購入することなく同じマシン上でソフトウェアをアクティベートするために使用できます。...

Mhyprot2DrvControl

Mhyprot2DrvControl mhyprot2 ドライバを使用してプロセスモジュールの列挙、プロセスメモリの読み書き、プロセスの強制終了を可能にするライブラリです。 使用方法 ビルドして実行してください。利用可能な関数と使用方法については Driver\MhyProt2.cs を参照してください。 デモ...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-83362

devalue: stringify/uneval serialize shared memory...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync (ALMALINUX9.6:CLSA-2026:1779466465)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779466465 advisory. - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, leading to disclosure of process memory...

Filedumper

FileDumper - メモリフォレンジックダンパー FileDumper v1.0.1 プロセスメモリ領域から直接ファイルをダンプするためのシンプルかつ強力なツールです。 人間の創意工夫 とAIの創造性 による深夜のコラボレーションから生まれました — xAIのGrok + Kadir Isbirligi 2026 「ある晩、おしゃべりして、コードを書き、テーブルを拳で叩きました… 人間 + AI = 無限の力！」 これは何ですか？ FileDumperは、Windowsベースのメモリフォレンジックツールで、以下のことが可能です： アクティブなプロセスの一覧表示...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Abacre Restaurant Point of Sale POS におけるメモリ内の機密情報の平文保存。 Abacre Restaurant Point of Sale POS のバージョン 15.0.0.1656...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1779369622)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779369622 advisory. - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is no...

EUVD-2026-88818

A missing bounds check in the binary decoder in lib0, versions 0.2.1-0.2.117 and earlier and 1.0.0-rc.32 and earlier, lets any unauthenticated remote peer read adjacent process memory and receive it back. readUint8Array never compares the wire-supplied length against the decoder's own view, so on...

CVE-2023-32784-kdbxpassdmp

keepassdumper.py vdohney/keepass-password-dumper のPython移植版 CVE-2023-32784 — オリジナルのC実装とその基盤となる技術のすべての功績は vdohney に帰属します。 このスクリプトは、プロセスメモリダンプをスキャンして、KeePass 2.x の SecureTextBoxEx がマスターパスワードの入力中に残すレンダリング文字列の残骸を探し、最初の文字を除くパスワードの全文字を復元します。オプションで、keepassxc-cli を使用して KDBX ファイルに対して不明な最初の文字をブルートフォースします。...

KeePass-dump-py

KeePass-dump-py オリジナルのKeePass 2.X Master Password Dumper CVE-2023-32784 POCをPythonで書き直す試みです。 脆弱性とその悪用プロセスの詳細については、オリジナルのPOCをご覧ください。 このスクリプトの機能: 1. KeePassプロセスが実行中か確認し、実行中でなければKeePassを起動します。 2. WerFaultを使用してKeePassプロセスをダンプします（コードスニペットはLSASSYから流用）。 3. プロセスダンプからパスワードを検索します。...

Astra Linux – Vulnerability in Chromium

In versions of Google Chrome before 151.0.7922.72, uninitialized use in codecs allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Medium...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

EUVD-2026-85428

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

PT-2026-97423

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

TencentOS Server 4: libpcap (TSSA-2026:1013)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1013 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-84564

An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result i...

CVE-2026-84596

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...