EhTrace

EhTrace EhTrace se pronuncia "ATrace" es un framework de instrumentación y trazado binario de alto rendimiento para Windows. Permite el análisis profundo en tiempo de ejecución de ejecutables de Windows sin necesidad de código fuente, modificaciones binarias o depuración tradicional. Visión gener...

honggfuzz

Honggfuzz Un fuzzer evolutivo, impulsado por retroalimentación y orientado a la seguridad. Honggfuzz es un fuzzer de propósito general que utiliza cobertura de código basada en software y hardware para encontrar errores. Es multiproceso, multihilo y admite fuzzing persistente para una velocidad...

revsync

revsync Plugin de sincronización en tiempo real para IDA Pro, Binary Ninja y Vivisect Sincroniza: Comentarios Nombres de símbolos Nombres de variables de pila Estructuras Cobertura de código cuánto tiempo se pasó mirando un bloque Instalación de IDA Pro Primero, clona al directorio de datos de ID...

minder

| | | | | 安装 | 文档 | 发布版本 Minder 是什么？ Minder 是一个开源平台，帮助开发团队和开源社区构建更安全的软件，并向他人证明所构建的内容是安全的。Minder 通过提供一组检查策略来帮助项目所有者主动管理其安全态势，从而最小化软件供应链中的风险，并向下游消费者证明其安全实践。 Minder 允许用户注册仓库并定义策略，以确保仓库和工件配置一致且安全。策略可以设置为仅告警或自动修复。Minder 提供了一组预定义的规则，也可以配置为应用自定义规则。 Minder 可以部署为 Helm chart，并提供一个 CLI 工具 minder。Custcodian...

paimei

PaiMei es un framework de ingeniería inversa que consta de múltiples componentes extensibles. El framework puede considerarse esencialmente como una navaja suiza del ingeniero inverso y ya ha demostrado ser eficaz para una amplia gama de tareas tanto estáticas como dinámicas, como asistencia a...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

Cartographer

Cartographer Mapeando la Cobertura de Código Desarrollado por Austin Peavy - https://github.com/aus10pv Publicado como código abierto por NCC Group Plc - https://www.nccgroup.com/ Publicado bajo la licencia Apache 2.0 consulte LICENSE para obtener más información...

Astra Linux – Vulnerability in phpunit

PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52, involving unsafe deserialization of code coverage data during PHPT test executions. The vulnerability resides in the cleanupForCoverage method, which...

wtf v0.5.8

what the fuzz A distributed, code-coverage guided, cross-platform snapshot-based fuzzer designed for attacking user and or kernel-mode targets running on Microsoft Windows and Linux user-mode experimental!. Overview what the fuzz or wtf is a distributed, code-coverage guided, customizable,...

gha-lab-227431b300

Kiwi TCMS - Open-Source-Testmanagement .. image:: https://img.shields.io/docker/pulls/kiwitcms/kiwi :target: https://kiwitcms.readthedocs.io/en/latest/installingdocker.html :alt: Downloads from Docker Hub .. image:: https://readthedocs.org/projects/kiwitcms/badge/?version=latest :target:...

[SECURITY] Fedora 43 Update: perl-Devel-Cover-1.51-4.fc43

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

[SECURITY] Fedora 44 Update: perl-Devel-Cover-1.52-4.fc44

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: The KCOV instrumentation is disabled after the loadsegments function is called. The loadsegments function modifies segment registers, invalidating the GS base—something that KCOV relies on for per-cpu data. When...

CVE-2026-43331

Summary of details (CVE-2026-43331): In the Linux kernel, a KCOV instrumentation issue in the x86/kexec path is resolved by disabling KCOV for the affected areas. The root cause is that load_segments() changes segment registers and invalidates the GS base KCOV relies on for per-CPU data, causing ...

[SECURITY] Fedora 42 Update: perl-Devel-Cover-1.44-7.fc42

This module provides code coverage metrics for Perl. Code coverage metrics describe how thoroughly tests exercise code. By using Devel::Cover you can discover areas of code not exercised by your tests and determine which tests to create to increase coverage. Code coverage can be considered as an...

CVE-2026-32805

CVE-2026-32805 corresponds to an Archive Slip flaw in Romeo’s webserver sanitization (github.com/ctfer-io/romeo/webserver). The root cause is a missing trailing path separator in the strings.HasPrefix check within sanitizeArchivePath, enabling a crafted tar to traverse outside the intended destin...

CVE-2026-32805

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32805 Romeo is vulnerable to Archive Slip due to missing checks in sanitization

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.2, the sanitizeArchivePath function in webserver/api/v1/decoder.go lines 80-88 is vulnerable to a path...

CVE-2026-32737

Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions. Prior to version 0.2.1, due to a mis-written NetworkPolicy, a malicious actor can pivot from the "hardened" namespace to any Pod...

Romeo 路径遍历漏洞

Romeo is an open-source Go application code coverage calculation tool developed by CTFer.io. Versions of Romeo prior to 0.2.2 contained a path traversal vulnerability. This vulnerability stemmed from defects in the path traversal checks, which could lead to arbitrary file writing...