6 matches found
nano-analyzer
Nano-analyzer 由AISLE 提供的极简 LLM 驱动的零日漏洞扫描器。 仅为演示目的的研究原型。 这是一个简单的单文件工具，能够检测真实的零日漏洞。请注意，这是一个原型，偏向于 C/C++ 内存安全漏洞，并且会产生误报。我们本着开放研究的精神原样分享它——请留意其中可能存在的尖锐问题。 功能说明 Nano-analyzer 是一个简单的单文件 Python 扫描器，它将源代码通过一个三阶段 LLM 流水线处理： 1. 上下文生成 — 模型为文件撰写安全简报：它的功能、不受信任数据的流向、存在的缓冲区及其大小。 2. 漏洞扫描 —...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
Virtuoso Open-Source Edition SQL注入漏洞
Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.9, which ste...
CVE-2014-125006 FFmpeg h264.c output_frame memory corruption
A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function outputframe of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this...