isa_recovery

ISA リカバリシステム ファームウェアバイナリと、その（おそらく誤った）逆アセンブル結果を、動作するGhidraプロセッサ仕様に変換するリバースエンジニアリングパイプラインです。ドキュメントもGhidraサポートもない独自プロセッサに遭遇したとき、このツールは各命令の実際のエンコーディング（どのビットがオペコードで、どのビットがレジスタで、どのビットが即値か）を復元し、Ghidraに直接ロードしてファームウェアを逆コンパイルできるSLEIGH仕様を書き出します。 内部ではエージェンティックワークフロー...

riscv-isa-sim

Spike RISC-V ISA 시뮬레이터 소개 RISC-V ISA 시뮬레이터인 Spike는 하나 이상의 RISC-V 하트에 대한 기능적 모델을 구현합니다. 이 이름은 미국 대륙횡단 철도의 완공을 기념하기 위해 사용된 황금 못golden spike에서 유래했습니다. Spike는 다음과 같은 RISC-V ISA 기능을 지원합니다: RV32I 및 RV64I 기본 ISA, v2.1 RV32E 및 RV64E 기본 ISA, v1.9 Zifencei 확장, v2.0 Zicsr 확장, v2.0 Zicntr 확장, v2.0 M 확장, v2.0...

DeadDialect

DeadDialect 매 부팅은 다른 언어를 말한다. 어제의 바이너리는 오늘의 죽은 코드다. 세션 고유의 RISC-V ISA 재매핑 시스템. 시스템이 부팅될 때마다 명령어 집합의 새로운 암호화 순열을 생성합니다. 한 세션용으로 컴파일된 바이너리는 다음 세션에서 암호학적으로 거부됩니다. 재부팅 후에도 살아남는 멀웨어는 실행될 수 없습니다 — 죽은 방언을 말하기 때문입니다. 아이디어 표준 ISA는 고정된 계약입니다. 모든 프로그램, 모든 라이브러리, 모든 멀웨어는 0x13의 의미, syscall 64의 기능, 스택 포인터가 어떤...

hcon2026hwctf

Hardware Hacking CTF hcon2026hwctf 하드웨어 CTF에 관심이 있다면, RISC-V RP2350 익스플로잇 챌린지로우 레벨를 다루는 HC0N CTF 2026의 첫 번째 공개 챌린지가 여기 있습니다. 우리는 이 챌린지를 너무 엘리트적이거나 어렵지 않게 만들려고 노력했습니다. 수백 명의 컨퍼런스 참가자들이 문제를 풀 기회를 가질 수 있도록요. 그 목표를 달성했기를 바랍니다. CTF를 집에서 실행하고 싶다면 Raspberry Pi Pico 2 를 하나 준비해서 이 펌웨어를 플래시하고, 라이트업은 읽지 마세요...

CLEANSTART-2026-SC57620 Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1

Security vulnerability affects the elasticsearch package. Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1...

Relative Path Traversal

Apache Tika is vulnerable to relative path traversal. The vulnerability is due to insufficient validation of the Study Assay File Name value in the ISA-Tab parser, where the parser concatenates the provided filename with the dataset directory without sanitizing path components and an attacker who...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: The instruction “ldbrx” is limited to processors that comply with ISA v2.06. Johan reported the following crash with the testbpf function on the ppc64 e5500 architecture: testbpf: 296 ALUENDFROMLE 64:...

Ubuntu 20.04 LTS / 22.04 LTS : Apache Tika vulnerability (USN-8717-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8717-1 advisory. It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Ti...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053343 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the below cras...

USN-8717-1 tika vulnerability

It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Tika subsequently parses could use this issue to read arbitrary files accessible to the Tika process and have their contents emitted into the extract...

USN-8717-1: Apache Tika vulnerability

It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Tika subsequently parses could use this issue to read arbitrary files accessible to the Tika process and have their contents emitted into the extract...

SoK: ARCUS: On the Efficiency and Efficacy of Hardware Fuzzing

This work presents a comprehensive analysis of contemporary hardware fuzzing techniques applied across three major abstraction layers: Instruction Set Architecture ISA, microarchitecture, and Register-Transfer Level RTL. Our study examines key factors including input stimulus quality, mutation...

Linux Distros Unpatched Vulnerability : CVE-2026-66755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the parseAssay method in ISArchiveParser.java. An attacker can read arbitrary files accessible to the Tika process by supplying a Study Assay File Name value in an ISA-Tab investigation file that points outside t...

DEBIAN-CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

UBUNTU-CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...

CVE-2026-66755 Apache Tika: Arbitrary Local File Read in ISArchiveParser

Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and 4.0.0-alpha-1, allows an attacker who can place files in a directory that the application subsequently parses to read arbitrary files accessible to the Tika process and have their...