41 matches found
quipu
Quipu 一个用于编写、验证、编译和测试 YARA 规则的桌面工作台。 Quipu（发音为“KEE-poo”）将项目浏览器、支持 YARA 的编辑器、YARA-X 编译器以及聚焦的扫描结果整合到一个本地应用程序中。它内嵌了 YARA-X 及其语言服务器，因此你无需单独安装 YARA。 !IMPORTANT Quipu 处于 MVP 阶段。最初支持的平台是 64 位 Linux；Windows 和 macOS 支持将随后推出。 功能 将包含 .yar 和 .yara 文件的文件夹作为工作区打开，或从临时规则开始。 浏览推断或配置的入口点、嵌套包含、外部包含以及项目问题。 使用 Monac...
CVE-2026-45536: Exposure of Sensitive Information to an Unauthorized Actor
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, nettyunixsocketrecvFd sets msgcontrol to char controlCMSGSPACEsizeofint line 940 — 24 bytes on 64-bit Linux. A peer-sent SCMRIGHTS cmsg carrying two ints has...
Buffer-Overflow-PoC
Buffer Overflow PoC — ret2libc on x86-64 Linux Overview D...
EUVD-2005-2873
Malware in sbrugna...
EUVD-2012-5043
Malware in sbrugna...
EUVD-2012-2482
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2012-5120
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or...
CVE-2012-2496
A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote attackers to execute arbitrary code via a crafted web...
Design/Logic Flaw
Copyfromuser on 64-bit versions of the Linux kernel does not implement the uaccessbeginnospec allowing a user to bypass the "accessok" check and pass a kernel pointer to copyfromuser. This would allow an attacker to leak information. We recommend upgrading beyond...
SUSE CVE-2005-0206
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 CVE-2004-0888 is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities...
SUSE CVE-2012-2807
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...
Security Bulletin: A vulnerability exists in the IBM® SDK Java™ Technology Edition affecting IBM Tivoli Network Manager (CVE-2021-35561).
Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2, which was disclosed in the Oracle October 2021 Critical Patch Update, but deferred until the release associated with the August 2022 Update. Vulnerability...
Design/Logic Flaw
There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large. On Windows running 32-bit Python, this results in an OverflowError or MemoryError due to the 2 GB limit. However, on Linux...
Adobe Flash - Pointer Crash in Drawing and Bitmap Handling
Adobe Flash - Pointer Crash in Drawing and Bitmap Handling Source: https://code.google.com/p/google-security-research/issues/detail?id=396&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id A nasty looking crash is manifesting in various different ways under fuzzing, apparentl...
encoded 64 bit execve shellcode
encoded 64 bit execve shellcode. Shellcode exploit for linux platform / Compile with: gcc -fno-stack-protector -z execstack This execve shellcode is encoded with 0xff and is for 64 bit linux. shell: file format elf64-x86-64 Disassembly of section .text: 0000000000400080 : 400080:=0948 b9 ff ff ff...
Linux 64 bit - Encoded execve shellcode
Linux 64 bit - Encoded execve shellcode. Shellcode exploit for linx86-64 platform / Compile with: gcc -fno-stack-protector -z execstack This execve shellcode is encoded with 0xff and is for 64 bit linux. shell: file format elf64-x86-64 Disassembly of section .text: 0000000000400080 : 400080: 48 b...
UBUNTU-CVE-2012-5120
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array...
Out-of-bounds
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array...
CVE-2012-5120: Improper Restriction of Operations within the Bounds of a Memory Buffer
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array...