Weggli_rules_SSTIC2023

Ecco un elenco curato di query weggli Puoi leggerle e usarle una per una, oppure lanciarle in batch: Uso: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ Ci sono tre categorie: 1. funzioni pericolose: come strcpy, system, ecc.. 2. stack : tenta di...

CVE-2017-7651

Informazioni Questo repository viene utilizzato per mostrare il codice C++ usato da Felipe Balabanian nella sua scoperta https://bugs.eclipse.org/bugs/showbug.cgi?id=529754. Puoi trovare il binario compilato nella sezione release. Dichiarazione di non responsabilità Questo non è il mio codice e n...

CVE-2019-25137-Version-Research

Ricerca sulle versioni interessate da CVE-2019-25137 Panoramica di CVE-2019-25137 CVE-2019-25137 è una vulnerabilità di iniezione XSLT in Umbraco CMS. La vulnerabilità è presente nella pagina web XSLT Extensive Stylesheet Language Transformations Visualizer. L'URI vulnerabile per questa pagina we...

SHGenOb

SHGenOB: Generatore di Shellcode da Codice C PIC Introduzione SHGenOB è uno strumento basato su Python progettato per generare shellcode da codice Position Independent Code PIC scritto in C. Automatizza il processo di compilazione del codice C, estrae la sezione .text e, opzionalmente, cripta lo...

GHSA-H7RQ-F9GQ-MC8R vulnerabilities

Vulnerabilities for packages: nginx-mainline, nginx-stable...

EUVD-2026-25610

Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator !== to verify the HMAC-SHA256 integrity seal during the decryption phase. This creates an Observable Timing Discrepancy CWE-208,...

VulnScout-C: A Lightweight Transformer for C Code Vulnerability Detection

Vulnerability detection in C programs is a critical challenge in software security. Although large language models LLMs achieve strong detection performance, their multi-billion-parameter scale makes them impractical for integration into development workflows requiring low latency and continuous...

TOSSS: A CVE-Based Software Security Benchmark for Large Language Models

With their increasing capabilities, Large Language Models LLMs are now used across many industries. They have become useful tools for software engineers and support a wide range of development tasks. As LLMs are increasingly used in software development workflows, a critical question arises: are...

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

openSUSE 16 Security Update : go1.24 (openSUSE-SU-2026:20220-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20220-1 advisory. Update to version 1.24.13. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code...

SUSE-SU-2026:20429-1 Security update for go1.24

This update for go1.24 fixes the following issues: Update to version 1.24.13. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling bsc1257692. - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session...

OPENSUSE-SU-2026:20214-1 Security update for go1.25

This update for go1.25 fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling bsc1257692. - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session...

EUVD-2006-3849

Malware in sbrugna...

EUVD-2014-8608

Malware in sbrugna...

EUVD-2024-16693

Malicious code in bioql PyPI...

EUVD-2022-38005

Malicious code in bioql PyPI...

Exploit for SQL Injection in Anisha Car_Rental_System

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Aut...

CVE-2023-28480

An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions UDFs from C/C++ code. To support this functionality TigerGraph allows users to upload custom C/C++ code which is then compiled and installed into the platform. An...

CVE-2024-6596

An unauthenticated remote attacker can run malicious c code included in curve files and execute commands in the users context...

[SECURITY] Fedora 41 Update: abseil-cpp-20240722.1-1.fc41

Abseil is an open-source collection of C++ library code designed to augment the C++ standard library. The Abseil library code is collected from Google's own C++ code base, has been extensively tested and used in production, and is the same code we depend on in our daily coding lives. In some case...