xz-cve-2024-3094

Análise Técnica do CVE-2024-3094: O Backdoor na Cadeia de Suprimentos do XZ Utils Autor Dorpe Karl Seyram Data 2026-01-25 Contexto O objetivo deste projeto é analisar uma vulnerabilidade real, moderna e de alto impacto CVE-2024-3094 da perspectiva de um Engenheiro de Segurança / Equipe Azul. Em v...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

flipper-template

Flipper Zero Zig Vorlage Eine moderne, produktionsreife Vorlage für die Entwicklung von Flipper Zero-Anwendungen unter Verwendung der Programmiersprache Zig. Dieses Projekt bietet ein optimiertes Build-System, das Zig mit dem Flipper Zero SDK integriert und es Entwicklern ermöglicht, typsichere,...

cve-2024-3094

🛡️ Cybersicherheitsprojekt: Analyse der XZ-Hintertür in liblzma 📄 Überblick Dieses Projekt analysiert die vielbeachtete Hintertür, die in xz-utils liblzma entdeckt wurde und die Versionen 5.6.0 und 5.6.1 betrifft. Der in das Upstream-Build-System eingeschleuste Schadcode zielte auf die...

xz-backdoor-research

CVE-2024-3094 अनुसंधान टूलकिट निकोलाओस नैट्सोपोलोस Nikolaos Natsopoulos, IAM सलाहकार द्वारा शोध रिपोर्ट के साथ इंटरैक्टिव ब्राउज़र-आधारित उपकरण: "CVE-2024-3094: XZ Utils में सामाजिक इंजीनियरिंग और बिल्ड सिस्टम हेरफेर के माध्यम से आपूर्ति श्रृंखला समझौता" 10.5281/zenodo.20700609 परिचय मार्च 2024...

packer-tutorial

विषय-सूची 1. पैकर क्या है? : पैकर के उद्देश्य का परिचय और पैकर के विकास के लिए आवश्यक चीज़ों के बारे में एक मार्गदर्शिका। 2. आवश्यक शर्तें : इस ट्यूटोरियल के साथ काम करने के लिए आवश्यक उपकरण। 3. एक झलक : इस ट्यूटोरियल के साथ आप क्या बनाएँगे, इसका एक प्रदर्शन। 4. हमारे CMake प्रोजेक्ट की रूपरेखा :...

MINI-RPG2-W5CX-H3PX

Bulletin has no description...

GO-2024-2920 vulnerabilities

Vulnerabilities for packages: guac, dagger, melange, zot...

CLEANSTART-2026-SG48140 Security fixes in melange 0.56.1-r1

Package melange version 0.56.1-r1 fixes 22 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-54174, CVE-2026-39830, CVE-2026-39831...

Linux Distros Unpatched Vulnerability : CVE-2026-19548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root caus...

GHSA-H443-HX93-M7QC vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-qemu-melange, linux-qemu...

EUVD-2026-53791

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011

CVE-2026-19011 affects TinyAGI 0.0.20. The vulnerable element is the function buildSystemPrompt in packages/server/src/routes/agents.ts, where manipulation can cause file inclusion. The attack may be initiated remotely and, per the description, the exploit is public. No remediation details are pr...

CVE-2026-19011 TinyAGI agents.ts buildSystemPrompt file inclusion

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011 TinyAGI agents.ts buildSystemPrompt file inclusion

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

MAL-2026-5926 Malicious code in test-copppss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106e028cee7749b7f3a9b327142fc0a402574bc72f3a62d129aa891afe85fe On npm install, the package's preinstall hook node index.js /dev/null 2&1 runs a shell pipeline that collects host identifiers — hostname, pwd, whoam...

[SECURITY] Fedora 43 Update: perl-ExtUtils-Builder-0.020-1.fc43

Writing extensions for various build tools can be a daunting task. This module tries to abstract steps of build processes into reusable building blocks for creating platform and build system agnostic executable descriptions of work...

Malicious Package

Overview app-config-utility is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...

Malicious code in wdb-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...

Fedora 43 : python-pulp-glue / python-requests (2026-8ad863685a)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8ad863685a advisory. 2.33.1 2026-03-30 ------------------- Bugfixes - Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. - Fixed...