SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

hot-jar-swapping-urlclassloader

URLClassLoader hot jar swapping The following example code shows the ability to hot jar swap an already loaded JAR-file and get code execution by abusing the fact that inner classes still access the JAR file when invoked, as long as the inode does not change. Tested on MacOS with OpenJDK And also...

FreeRDP RDP DoS

The vulnerability of the updatereadcachebitmapv3order function in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261020-73-0009

The vulnerability of the freereaderstatesa and freereaderstatesw functions in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service failure...

ROS-20261014-73-0088

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261014-73-0049

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261014-73-0123

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261014-73-0110

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Loss-Tolerant Measurement-Device-Independent QKD over Untrusted Repeaters Via High-Dimensional Time-Bin Multiplexing

We propose a loss-tolerant measurement-device-independent quantum key distribution MDI-QKD protocol using time-bin-multiplexed single photons entangled with local qubits stored in nitrogen-vacancy NV centers. In each round, Alice and Bob each send a single multiplexed photon to an untrusted...

ROS-20261014-73-0149

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0288

The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 protocol implementation is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0229

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

SMB Server Network Transport Driver DoS

The vulnerability of the SMB Server Network Transport Driver srvnet.sys on Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261012-73-0120

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0022

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0078

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Doctor Trigger: A Framework for Release-Bound Face Verification

Face swapping and generative editing enable realistic facial manipulation, while online redistribution complicates publisher oversight of circulating face images. Existing approaches establish provenance, detect manipulation, recover embedded watermarks, verify image integrity, or disrupt...

Adobe InDesign Pointer Swap DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Adobe InDesign Pointer Swap DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...