bash-cve-2014-6271-fixes

CVE-2014-6271 patches for bash The original mailing list post only lets you fetch the patches over unauthenticated HTTP. Sigh I've downloaded these over HTTP and put them into a git repository that you can fetch over HTTPS and check independently. I have not checked whether these files are...

rscrypto

rscrypto rscrypto puts cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. Target-gated SIMD and assembly accelerate portable Rust backends without a production C/FFI, OpenSSL, or system-library dependency. rscrypto is a primitives...

tfsec

📣 tfsec to Trivy Migration As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is Trivy. Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations...

masc

masc Сканер вредоносного ПО веб, разработанный во время CyperCamp Hackathon 2017 О проекте домашняя страница PyPI Возможности На данный момент некоторые функции доступны для любого типа сайтов пользовательских или CMS, а некоторые — только для определённых платформ: Сканирование любого сайта на...

AMSI-Bypass

AMSI-Bypass AMSI 트리거 목록 VBA, JScript / VBScript 참고 : MISC 104 - AMSI: Fonctionnement et Contournements VBA, JScript 및 VBScript에서 AMSI는 순환 버퍼를 사용하여 명령을 기록하고 의심스러운 것으로 간주되는 함수 목록을 유지합니다. 블랙리스트에 등록된 함수 중 하나를 사용하면 등록된 AMSI 공급자가 순환 버퍼에 대한 검사를 트리거합니다. 이 저장소에는 VBE7.DLL, jscript.dll 및 vbscript.dll에 정의된...

cve-2024-12085

CVE-2024-12085 情報漏えいエクスプロイト 注意: このエクスプロイトは汎用的ではありません! ターゲットモジュールとチェックサムはハードコードされています。自動チェックサム計算はまだ実装されていません。 その他のファイル port-forwarding.py は https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e から変更したものです。rsyncサーバとクライアント間のトラフィックをキャプチャするために使用します。 checksum.py...

EUVD-2026-55397

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

CVE-2026-64007

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption a...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-32148

Insufficient Verification of Data Authenticity vulnerability in hexpm hex Hex.RemoteConverger module allows dependency integrity bypass via unverified lockfile checksums. Hex stores checksums for dependencies in the mix.lock file to ensure reproducible and integrity-checked builds. However,...

EUVD-2026-33788

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android allows a hacker to trigger a service failure.

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a resource exhaustion issue in the verifySignature function found in ApkChecksums.java. This vulnerability may lead to local denial of...

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

...

rsync: rsync server leaks arbitrary client files

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

Linux Distros Unpatched Vulnerability : CVE-2026-9150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian...