zipdefrag

이 덤프는 퍼즐이다 또는 바보와 반항아를 위한 고급 샷건 파싱 옛날 옛적에 옛날옛적에, 사랑하는 독자여, 어둡고 폭풍우 치던 밤, 충실한 저자는 당혹스럽고 신비로운 상황을 우연히 마주쳤습니다. 칩 오프 메모리 분석과 리버싱을 가로막는 유일한 것은, 임베디드 자바 사용으로 인한 압축과 결합된 미지의 단편화된 독점 파일 시스템이었으며, 그 압축 때문에 기존 파일 카빙 도구의 효율이 떨어졌습니다. 그 당시에는 서로 맞물려 보이는 청크들을 수동으로 이어 붙이는 임시방편을, 지저분한 파이썬 콘솔 작업과 못생긴 임시 bash 스크립트로 ...

jfrog-CVE-2022-21449

CVE-2022-21449 نظرة عامة تتيح هذه الأداة إجراء فحص سريع لأرشيفات الكود المترجمة .jar و .war إلخ للتحقق من الثغرة CVE-2022-21449 من خلال البحث عن السلسلة النصية التي تشير إلى استخدام خوارزمية ECDSA. تستخدم الأداة Python3 بدون متطلبات إضافية. الاستخدام root@kitploit: python cve202221449.py...

[SECURITY] [DSA 6431-1] openjdk-25 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6431-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 11, 2026 https://www.debian.org/security/faq -...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

openjdk: Enhance Jar file processing (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The processImpl method in SignatureFileVerifier exhibits On^2 time complexity when verifying JAR files where different entries have different signer combinations, potentially leading to DoS...

Debian dsa-6425 : openjdk-21-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6425 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/securit...

EUVD-2026-9875

NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...

EUVD-2005-4797

Malware in sbrugna...

EUVD-2012-2188

Malware in sbrugna...

EUVD-2015-7708

Malware in sbrugna...

EUVD-2011-3625

Malware in sbrugna...

EUVD-2008-5337

Malware in sbrugna...

EUVD-2007-0412

Malware in sbrugna...

EUVD-2019-2209

Malware in sbrugna...

EUVD-2013-1921

Malware in sbrugna...

EUVD-2024-0948

Malicious code in bioql PyPI...

EUVD-2023-31594

Malicious code in bioql PyPI...

EUVD-2025-9025

Malicious code in bioql PyPI...

EUVD-2025-12500

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-38807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be...