CVE-2021-42574

CVE-2021-42574 - 代码生成器 // 更新：2021年11月5日 现在不仅可以编码，还可以解码文件。这意味着包含支持的bidi字符的文件现在可以转换为带有bidi占位符（LRO, ...）的模板文件。 利用最近发布的bidi攻击漏洞生成恶意文件，该漏洞在Unicode规范中被发现，并影响许多解释器/编译器。 引用自 cve.mitre.org：...

SUSE CVE-2010-2648

The implementation of the Unicode Bidirectional Algorithm aka Bidi algorithm or UBA in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

New 'Trojan Source' Technique Lets Hackers Hide Vulnerabilities in Source Code

A novel class of vulnerabilities could be leveraged by threat actors to inject visually deceptive malware in a way that's semantically permissible but alters the logic defined by the source code, effectively opening the door to more first-party and supply chain risks. Dubbed "Trojan Source...

‘Trojan Source’ Bug Threatens the Security of All Code

Virtually all compilers -- programs that transform human-readable source code into computer-executable machine code -- are vulnerable to an insidious attack in which an adversary can introduce targeted vulnerabilities into any software without being detected, new research released today warns. Th...