flare-emu

flare-emu flare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicorn’s emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible an...

flare-vm

FLARE-VM Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine VM. FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on t...

malpedia-flossed

Malpedia FLOSSed This repository contains the result of the FLARE FLOSS tool applied to all unpacked and dumped samples in Malpedia, pre-processed for further use. We intend to update this collection periodically. In the last run in January 2026, 9.202 files associated with 2.136 malware families...

flareon2023

Flare-On 10 solutions Source codes of my solutions for the tasks from Flare-On10 challenge...

flareon2024

Flare-On 11 solutions Source codes of my solutions for the tasks from Flare-On11 challenge. My writeups of selected tasks available here...

When Handshakes Go Dark: An Adaptive Semantic-Sequential Fusion Framework for Encrypted Traffic Classification

Encrypted traffic classification is essential for network security monitoring and traffic management. Self-supervised pre-training can learn reusable representations from large-scale unlabeled traffic, but TLS 1.3, QUIC, and privacy mechanisms such as Encrypted Client Hello ECH increasingly conce...

[SECURITY] Fedora 45 Update: flare-im-0.22.7-1.fc45

Flare is an open-source, Rust-based Signal chat client designed for Linux desktop and mobile environments using GTK4 and Libadwaita for an adaptive interface. Developed by Schmiddi on Mobile, the project provides a native experience with secure local storage via libsecret...

Fedora 45 : flare-im (2026-3b19eca5ec)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3b19eca5ec advisory. Latest upstream release. Changes: https://gitlab.com/schmiddi-on-mobile/flare/-/blob/0.22.7/CHANGELOG.md . ---- Update to latest upstream security release...

CVE-2026-114197

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

CVE-2026-114198

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

CVE-2026-114198

The Mandiant FLARE floss utility, in releases before 3.2.0 , is vulnerable to arbitrary code execution due to the deserialization of untrusted data . An attacker can achieve this by providing a specially crafted .viv or .exe.viv workspace to the floss utility. No specific exploit details or remed...

CVE-2026-114198 Deserialization of untrusted data in floss

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

CVE-2026-114198

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

EUVD-2026-106924

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

CVE-2026-114198 Deserialization of untrusted data in floss

Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss utility...

CVE-2026-114197 Deserialization of untrusted data in capa

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

EUVD-2026-106923

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...

tenrec-capa (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-114197 via flare-capa (9.2.1)

flare-capa PYPI version 9.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on flare-capa and may be impacted: - tenrec-capa =0.1.0, =0.1.1 Source cves: CVE-2026-114197 Source advisory: MEND:CVE-2026-114197...

CVE-2026-114197

Mandiant FLARE capa releases prior to version 10.0.0 are vulnerable to arbitrary code execution due to the deserialization of untrusted data . This vulnerability occurs when the capa utility processes a specially crafted .viv or .exe.viv workspace. The CVSS v4.0 score for this issue is 8.7 (HIGH)...

CVE-2026-114197

Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa utility...