gdb-dashboard

GDB dashboard GDB dashboard is a standalone .gdbinit file written using the Python API that enables a modular interface showing relevant information about the program being debugged. Its main goal is to reduce the number of GDB commands needed to inspect the status of current program thus allowin...

CVE-2023-6702

Async Stack Trace의 Type Confusion을 통한 Chrome Renderer 1day RCE CVE-2023-6702 요약 이 취약점으로 인해 원격 공격자가 Chrome 렌더러 프로세스 내에서 임의 코드를 실행할 수 있었습니다. 비동기 스택 트레이스 처리 코드에 불충분한 타입 검사가 있었습니다. 이로 인해 FunctionContext와 NativeContext 사이의 타입 혼동type confusion이 발생하여 JSGlobalProxy-hash 값에 대한 불법적인 접근이 발생했습니다. 힙 스프레이heap...

EtwLeakKernel

EtwLeakKernel 이 저장소는 ETW를 사용하여 커널 메모리 주소를 유출하는 프로그램의 PoC를 포함합니다. 이는 소비자를 생성하고거의 모든 공급자가 커널 주소를 유출하므로 거의 모든 공급자에 대해 가능 스택 추적을 요청함으로써 작동합니다. 스택 추적을 받으면 이를 파싱하여 커널 메모리 주소를 추출합니다. Microsoft는 관리자에서 커널로의 경계를 보안 경계로 간주하지 않기 때문에, 이 상황은 당분간 변경되지 않을 것입니다. 일부 익스플로잇 시나리오에서 유용할 수 있습니다예: ETW 공급자가 커널 기본 주소에서 특정...

Microweber < 1.2.11 - CRLF Injection

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0666 info: name: Microweber 1.2.11 - CRLF Injection author: ritikchaddha severity: high description: | CRLF Injection leads to Sta...

CVE-2025-32044

CVE-2025-32044 — Moodle 비인증 REST API 사용자 데이터 노출 스택 트레이스 인자Args 유출 → 이름, 이메일, 비밀번호 해시 개요 CVE-2025-32044 는 Moodle LMS 4.5.04.5.2 에 존재하는 심각도가 높은CVSS 7.5 비인증 정보 공개 취약점입니다. 이 취약점은 Moodle REST API 예외 처리기 — lib/classes/router/response/exceptionresponse.php의 exceptionresponse::getpayloaddata — 에 존재합니다. 수...

CVE-2026-56139

camel-undertow Rest DSL muteException Stack-Trace Disclosure Reproducer CVE-2026-56139 이 프로젝트는 Apache Camel의 camel-undertow Rest DSL 에서 정보 노출 문제를 시연하며, CVE-2026-56139 로 추적됩니다. muteException 옵션은 처리되지 않은 예외의 세부 정보를 HTTP 클라이언트에 반환할지 여부를 제어합니다. 일반 undertow 엔드포인트에서는 옵션이 작동하지만, undertow Rest DSL 은...

CVE-2023-47459

CVE-2023-47459 설명 Knovos Discovery v.22.67.0에서 원격 공격자가 다음 구성 요소를 사용하여 기밀 정보에 접근할 수 있는 취약점이 발견되었습니다: /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName, /DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation 및 /DiscoveryProcess/Service/Admin.svc/getReviewIdForReport...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException 스택 트레이스 노출 동일한 Apache Camel 취약점에 대한 실행 가능한 개념 증명PoC 재현 코드로, 런타임별로 하나씩 제공됩니다: 런타임| 디렉터리| 스택| 포함된 컴포넌트 ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| netty-http 및 undertow Camel...

CVE-2026-89815: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Drop tt-restore after successful restore ttmpoolrestoreandalloc can successfully complete the restore process via ttmpoolrestorecommit, but tt-restore is not dropped afterward. As a result, subsequent backup/restore flow...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ftrace: A regression was fixed related to the module command in stacktracefilter. When executing the following command: echo "write:mod:ext3" /sys/kernel/tracing/stacktracefilter The current mod command causes a null pointer...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5e: Fixed page reclamation for dead peer hairpin When adding a hairpin flow, a send queue is created on the peer net device’s side, which claims some host memory pages for its internal ring buffer. If the peer net devic...

SUSE CVE-2026-79777

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

CVE-2026-11873

An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification...

EUVD-2026-69037

An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification...

CVE-2026-11873

An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification...

PT-2026-84162

An Apache-proxied Dogtag CA REST endpoint exposed by IdM POST /ca/rest/certrequests returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification...

CVE-2026-81672

SQL injection vulnerability in the ‘/ws/apiprensa/getVideoSubcanal’ endpoint due to improper handling of the idvideo parameter. The application does not sanitize input before constructing SQL queries, which results in execution errors when malicious input is provided. The vulnerability exposes...

Linux Distros Unpatched Vulnerability : CVE-2026-79777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, modul...

CVE-2026-79777

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

EUVD-2026-65535

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...