wolfGuard

FIPS 140-3 암호화를 사용하는 WolfGuard VPN WolfGuard는 원래 Jason Donenfeld가 설계하고 작성한 Linux 커널 기반 WireGuard의 wolfSSL FIPS 규격 리팩터입니다. 사용법은 본질적으로 동일합니다. WolfGuard에는 두 가지 주요 구성 요소가 있습니다: wolfguard.ko 커널 모듈과 wg-fips 구성 도구입니다. wolfguard.ko는 libwolfssl.ko 커널 모듈에 의존하고, wg-fips는 libwolfssl.so 라이브러리에 의존합니다 — 이러한 의존성...

jsch

JSch-0.1.55의 포크 원본 README 참조 이 라이브러리를 사용해야 하는 이유는 무엇인가요? 제가 블로그 포스트에서 설명했듯이 주요 요점은 다음과 같습니다: OpenSSH는 릴리스 8.8부터 기본적으로 ssh-rsa를 비활성화했으며, rsa-sha2-256과 rsa-sha2-512를 지원하는 라이브러리가 필요합니다. 드롭인 교체: 종속성 좌표만 변경하면 바로 사용할 수 있습니다. SourceForge의 JSch는 더 이상 활발히 유지관리되지 않습니다. OpenJDK 기능과 동기화되어 추가 종속성이 필요 없습니다. 문서...

e9patch

E9Patch - 강력한 정적 바이너리 재작성 도구 E9Patch는 x8664 Linux ELF 바이너리를 위한 강력한 정적 바이너리 재작성 도구입니다. E9Patch는 다음과 같은 특징을 가집니다: 확장 가능 : E9Patch는 웹 브라우저100MB 크기를 포함한 크고 복잡한 바이너리를 안정적으로 재작성할 수 있습니다. 호환성 : 재작성된 바이너리는 원본을 대체하여 사용할 수 있으며, 추가 종속성이 없습니다. 빠름 : E9Patch는 대부분의 바이너리를 몇 초 안에 재작성할 수 있습니다. 낮은 오버헤드 : 성능과 메모리 모두...

rebrowser-patches

🪄 Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...

nginx-cve-fix

Nginx CVE 수정 - nginx:1.25-bookworm용 소스 빌드 드롭인 공식 nginx:1.25-bookworm 이미지에 존재하는 두 개의 CVE를 수정하면서 업스트림 런타임 동작을 유지하는 소스 빌드 nginx 1.25.5 컨테이너 이미지입니다. CVE| 구성 요소| 심각도| 기법| 검증 모델 ---|---|---|---|--- CVE-2024-6119| OpenSSL / libssl3| 높음| 종속성 버전 업| 스캐너 검증 가능: dpkg 데이터베이스에서 libssl3 3.0.20 확인 가능...

patchright v1.63.0

🎭 Patchright Patchright is a patched and undetected version of the Playwright Testing and Automation Framework. It can be used as a drop-in replacement for Playwright. !NOTE This repository serves the Patchright Driver. To use Patchright, check out the Python Package, the NodeJS Package or the...

jsch jsch-2.28.7

Fork of JSch-0.1.55 See original README Why should you use this library? As I explained in a blog post the main points are: OpenSSH has disabled ssh-rsa in release 8.8 per default and you need a library which supports rsa-sha2-256 and rsa-sha2-512. Drop in replacement: just change dependency...

MAL-2026-12102 Malicious code in @wethenorth12/solana-web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d27d76902370899c3362602581cdec59396e1ece2bd87976f1798083957f89 On require of the package's main entry index.js, the code collects process.env, hostname, username, homedir, platform, cwd and a timestamp,...

MAL-2026-12089 Malicious code in @wethenorth12/crypto-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56f2c55cacbd8d06b8d3b0f20b808262c42cd002441399d8e39a2f03c600f3c On require, index.js collects process.env, hostname, username, homedir, platform, and cwd, base64-encodes the blob, and POSTs it to...

Malicious code in @wethenorth12/bitcoinjs-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f602036ff9f524298056528fbec6c58c9fb66ea2686bec418694b5854aeea4 On require, index.js collects the full process.env object together with hostname, username, home directory, platform, current working directory, and ...

MAL-2026-12107 Malicious code in @wethenorth12/web3-utils-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6591661338a325995ebe471f7d8157c1be9458f38336c4c11032033b150108 On module load, index.js collects the host identifiers os.hostname, os.userInfo.username, home directory, platform, cwd and the entire process.env,...

Malicious code in @wethenorth12/solana-spl-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dde46db2fbc17fae2957070f85bc43fdb1d265444f2e5adc936faa6f82e96e2 @wethenorth12/solana-spl-token is a typosquat of the legitimate @solana/spl-token package. On module load, index.js collects hostname, username, home...

Malicious code in @wethenorth12/mnemonic-to-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c373b3f6b1c60d079fb7c63d13a51f7e42ee41feeff2c04c5ab925ad5dad41fb Package advertises itself as a drop-in replacement for bip39 and exposes stub wallet functions createWallet, generateMnemonic to attract...

Exploit for CVE-2026-30623

mcpshield !Python 3.10+https://img.shields.io/badge/python...

[SECURITY] Fedora 44 Update: python-idna-3.18-1.fc44

A library to support the Internationalised Domain Names in Applications IDNA protocol as specified in RFC 5891 . This version of the protocol is often referred to as "IDNA2008" and can produce different results from the earlier standard from 2003. The library is also intended to act as a suitable...

Malicious code in solana-js-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855cf386497f33e21db48ae8b87c769fd777f52b585f3d8d5f276fd4c9d42628 Package masquerades as a 'Drop-in replacement for @solana/web3.js' and lists its author as 'Solana Labs Maintainers ' to impersonate the legitimate...

MAL-2026-5860 Malicious code in solana-js-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855cf386497f33e21db48ae8b87c769fd777f52b585f3d8d5f276fd4c9d42628 Package masquerades as a 'Drop-in replacement for @solana/web3.js' and lists its author as 'Solana Labs Maintainers ' to impersonate the legitimate...

Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2026-1676)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1676 advisory. Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero. CVE-2026-6654 Tenable has extract...

CVE-2026-40895

follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect 301/302/307/308, follow-redirects only strips authorization, proxy-authorization, and cookie header...

UBUNTU-CVE-2026-40895

follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior to 1.16.0, when an HTTP request follows a cross-domain redirect 301/302/307/308, follow-redirects only strips authorization, proxy-authorization, and cookie header...