expat_CVE-2024-28757

Expat, 릴리즈 2.2.6 이것은 1997년 James Clark이 시작한 XML 파싱용 C 라이브러리인 Expat입니다. Expat은 스트림 지향 XML 파서입니다. 즉, 파싱을 시작하기 전에 파서에 핸들러를 등록한다는 의미입니다. 이 핸들러들은 파서가 파싱 중인 문서에서 관련 구조를 발견할 때 호출됩니다. 시작 태그는 핸들러를 등록할 수 있는 구조 유형의 한 예입니다. Windows 사용자는 사전 컴파일된 라이브러리와 실행 파일, 그리고 개발자를 위한 소스 코드를 모두 포함하는 expatwin32 패키지를 사용해야 합니...

CVE-2023-4911-Lab

CVE-2023-4911 "Looney Tunables" Analysis Environment Docker-based practice environment for analyzing and developing exploits for the GNU C Library glibc dynamic loader buffer overflow vulnerability Local Privilege Escalation. CVE Information Item| Content ---|--- CVE Number| CVE-2023-4911 Alias|...

external_expact_AOSP10_r33_CVE-2022-25314

Expat, リリース 2.2.6 これはExpatです。XMLを解析するためのCライブラリであり、1997年にJames Clarkによって開始されました。Expatはストリーム指向のXMLパーサーです。つまり、解析を開始する前にパーサーにハンドラを登録します。これらのハンドラは、パーサーが解析中のドキュメント内の関連構造を発見したときに呼び出されます。開始タグは、ハンドラを登録できる構造の一例です。 Windowsユーザーは、expatwin32...

[SECURITY] Fedora 43 Update: mongo-c-driver-1.30.11-1.fc43

mongo-c-driver is a client library written in C for MongoDB...

liboqs

liboqs liboqs is an open source C library for quantum-safe cryptographic algorithms. liboqs Overview Status Supported Algorithms Key encapsulation mechanisms Signature schemes Stateful signature schemes Limitations and Security Platform limitations Support limitations Quickstart Linux and Mac...

external_expact_AOSP10_r33_CVE-2022-25313

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

Venom

Venom Venom은 통신을 위한 대체 방법을 제공하기 위해 만들어진 C++ 라이브러리입니다. 프로세스로 추적될 수 있는 소켓을 생성하는 대신, 새롭고 "숨겨진"창이 표시되지 않는 분리된 Edge 프로세스를 생성하고Edge는 모든 Windows 10+에 설치되어 있으며 의심을 일으키지 않는 브라우저이기 때문에 선택되었습니다 해당 소켓 중 하나를 가로채 네트워크 작업을 수행합니다. 분리된 브라우저 프로세스를 생성할 때의 이점은 사용자가 실수로 닫을 위험이 없으며, 소켓이 존재하지만 어떤 사이트와도 통신하지 않으므로 잠재적인 충...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

Mhyprot2DrvControl

Mhyprot2DrvControl mhyprot2 드라이버를 사용하여 프로세스 모듈 열거, 프로세스 메모리 읽기/쓰기 및 프로세스 종료를 가능하게 하는 라이브러리입니다. 사용법 빌드 후 실행하세요. 사용 가능한 함수와 사용법은 Driver\MhyProt2.cs를 참조하세요. 데모...

SUSE CVE-2026-89092

The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted...

Linux Distros Unpatched Vulnerability : CVE-2026-95818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the...

CVE-2026-95818

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

UBUNTU-CVE-2026-86805

A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DTRPATH for setuid/setgid ATSECURE programs, glibc validates the lexically normalized...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-4046 DESCRIPTION: The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399...

CVE-2026-95818: Stack-based Buffer Overflow

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...

wolfCOSE v2.0.0

wolfCOSE wolfCOSE is a lightweight C library implementing CBOR RFC 8949, COSE RFC 9052/9053, and post-quantum ML-DSA for COSE RFC 9964 using wolfSSL as the crypto backend. Main Features Complete RFC 9052 message set : all six COSE message types, including multi-signer COSESign and multi-recipient...

SUSE CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

Linux Distros Unpatched Vulnerability : CVE-2026-8674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200...

CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

DEBIAN-CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...