DeadDialect

DeadDialect すべてのブートが異なる言語を話す。昨日のバイナリは今日の死んだコードである。 セッション固有のRISC-V ISA再マッピングシステム。システムが起動するたびに、命令セットの新しい暗号学的置換を生成する。あるセッション用にコンパイルされたバイナリは、次のセッションでは暗号学的に拒否される。再起動後も生存するマルウェアは実行できない——死んだ方言を話すからだ。 アイデア 標準ISAは固定された契約である。すべてのプログラム、すべてのライブラリ、すべてのマルウェアは、0x13が何を意味するか、syscall...

EvilFontTool

EvilFontTool 一个基于字体的欺骗工具，用于红队、安全研究以及其他用途。 EvilFontTool 将机器可读的文本隐藏在文档中，而文档向人类读者显示完全不同的文本。它通过使用 Evil Fonts（邪恶字体） 来实现这一点——这种字体故意欺骗观看者，渲染出与计算机所理解的不同字母。通过重映射字体字形，文档的可见字符向人类展示的是一回事，而终端、AI 系统和剪贴板复制粘贴看到的则是另一回事。 Evil Font 演示/实验室 !!别错过!! 查看演示 → 此处 查看 Evil Font 实验室 → 此处 由于手机渲染字体的方式，Word docx 演示在移动设备上无法 正常工作...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

esperto-wiimote

Esperto Wiimote !IMPORTANT Este software requiere un controlador de kernel de Wiimote actualizado/corregido, disponible aquí. Tras la instalación, ejecuta sudo sed -i '/ATTRinhibited="1"/s/^//' /etc/udev/rules.d/99-wiimote.rules para desinhibir los eventos de IR y acelerómetro. Basado en el siste...

dwn

🥽 dwn dockerpwn - Docker攻撃ツールマネージャー はじめに dwn は「ハッカーのためのdocker-compose」です。docker-compose と同様のシンプルなYAML「プラン」形式を用いて、イメージ名、バージョン、ボリューム/ポートマッピングを定義し、ツールを使えるように設定します。 機能 dwn を使用すると、以下のことが可能です: Dockerコンテナ内で使用する一般的なペンテストツールの設定 コンテキスト認識型のボリュームマウント コンテナ再起動なしでの動的なポートバインディングの変更 その他にも多数！ インストール pip3 install d...

CVE-2026-89640

A flaw was found in the Linux kernel's Common Internet File System CIFS implementation. When performing a file range remapping operation with a zero length, an integer underflow can occur if the offset exceeds the file size. This can lead to corruption of the byte count in file system control...

SUSE-SU-2026:3821-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-64530: net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhand bsc1271867. - CVE-2026-64600: xfs: resample the data fork mapping after cycling...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: amdgputtmgartbind set gtt bound flag Otherwise, after the GTT context is released, the GTT and gart space are freed. However, amdgputtmbackendunbind does not clear the gart page table entry; instead, it leaves a valid...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QEMU implementation of VMWare’s paravirtual RDMA device. The issue arises when handling the “PVRDMACMDCREATEMR” command due to improper memory remapping mremap. This flaw allows a malicious guest to crash the QEMU process on the host. The greatest threat posed by this...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: iommu/vt-d: Fixed a potential memory leak in intelsetupirqremapping. After committing e3beca48a45b “irqdomain/treewide: Keeps the firmware node unconditionally allocated”. For the tear-down scenario, the fn variable is only...

SUSE CVE-2026-53374

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpubocreatekernel does not zero-initialize the buffer, when a single PTE is written the TLB may speculativel...

CVE-2026-53374

The CVE-2026-53374 issue affects the Linux kernel’s DRM/AMDGPU path: during amdgpu_bo_create_kernel() allocation, the GART table is not zero-initialized, so writing a single PTE can cause the TLB to speculatively load other uninitialized entries from the same cacheline. This can yield stale or ga...

EUVD-2026-36605

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping...

CVE-2026-34195

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping...

CVE-2026-34195

Summary: CVE-2026-34195 describes a GPU DDK kernel heap OOB write caused by incorrect indexing of internal state during sparse allocation remapping, specifically involving PMRChangeSparseMemOSMem and physical page translation from virtual page indexes. This is triggered by non-privileged user act...

CVE-2026-34195 GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping...

CVE-2026-34195 GPU DDK - Kernel heap OOB write in PMRChangeSparseMemOSMem due to incorrect physical page translation from virtual page indexes

Software installed and run as a non-privileged user may conduct intentional GPU sparse memory API calls to cause out of bounds write in the kernel. The product incorrectly indexes internal state when performing sparse allocation remapping...

PT-2026-49020

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Software installed and run as a non-privileged user may perform intentional GPU sparse memory API calls to cause an out-of-bounds write in the kernel. This occur...

CVE-2026-8795

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in clientinfo.json inside a collection ZIP is inserted into a YAML template via Go's text/template without escaping. An attacker providing a crafted...

CVE-2026-8795

A YAML injection vulnerability exists in the Windows.Collectors.Remapping artifact of Rapid7 Velociraptor before version 0.76.6. The hostname field in clientinfo.json inside a collection ZIP is inserted into a YAML template via Go's text/template without escaping. An attacker providing a crafted...