|
You are here |
blog.xyz.is | ||
| | | | |
docfate111.github.io
|
|
| | | | | [AI summary] A detailed explanation of a Linux kernel vulnerability (CVE-2021-42327) in the GPU driver, involving a SLUB buffer overflow that allows privilege escalation and arbitrary code execution through exploitation techniques like heap spraying and KASLR bypass. | |
| | | | |
mem2019.github.io
|
|
| | | | | Last weekend we played Hack.lu CTF and got 5th place. I am quite busy recently so I only solved one challenge: Stonks Socket, and I think it is quite interes... | |
| | | | |
www.jaybosamiya.com
|
|
| | | | | Return Oriented Programming (ROP) is one of the classic exploitation techniques, that is used to bypass the NX (non executable memory) protection. Microsoft has incorporated NX as DEP (data execution prevention). Even Linux etc, have it effective, which means that with this protection, you could no longer place shellcode onto heap/stack and have it execute just by jumping to it. So now, to be able to execute code, you jump into pre-existing code (main binary,... | |
| | | | |
www.nodejs-security.com
|
|
| | | A critical command injection vulnerability has been discovered in the Codehooks MCP Server that allows attackers to execute arbitrary commands on the host system. Learn about the vulnerability, its impact, and how to protect your MCP Server implementations. | ||