165 matches found
extrude
extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage Usage: extrude flags file Flags: -a, --all Show details o...
Forblaze
Forblaze - A Python Mac Steganography Payload Generator/In-Memory Dylib/MachO Execution Author: AsaurusRex Disclaimer DO NOT use this project for purposes other than legitimate red teaming/pentesting jobs, or research. DO NOT use this for illegal activity of any kind, and know that this project i...
LIEF
Blog • Documentation • About About The purpose of this project is to provide a cross-platform library to parse, modify and abstract ELF, PE and MachO formats. Main features : Parsing : LIEF can parse ELF, PE, MachO, COFF, OAT, DEX, VDEX, ART and provides a user-friendly API to access their...
extrude
extrude Analiza binarios en busca de características de seguridad faltantes, divulgación de información y más. 🚧 Extrude se encuentra en las primeras etapas de desarrollo y actualmente solo admite binarios ELF y MachO. Los binarios PE Windows serán compatibles pronto. Uso Usage: extrude flags fil...
Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc Multiple Vulnerabilities (crlsa-2022_1819)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20221819 advisory. golang: Command-line arguments may overwrite global data CVE-2021-38297 golang: archive/zip: malformed archive may cause panic or memory exhaustion...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the parsing process of Mach-O binaries, specifically when reading size and count fields such as DataSize, DataOffset, Size, Count, and Length without proper validation. An...
bloaty:fuzz_target: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Project: https://github.com/google/bloaty.git Detailed Report: https://oss-fuzz.com/testcase?key=5090236586852352 Project: bloaty Fuzzing Engine: libFuzzer Fuzz Target: fuzztarget Job Type: libfuzzerubsanbloaty Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5b19eed80051 Crash State:...
EUVD-2019-9258
Malware in sbrugna...
EUVD-2023-31355
Malicious code in bioql PyPI...
EUVD-2023-32163
Malicious code in bioql PyPI...
EUVD-2025-24139
Malicious code in bioql PyPI...
EUVD-2022-0143
Malicious code in bioql PyPI...
EUVD-2022-0144
Malicious code in bioql PyPI...
EUVD-2022-0145
Malicious code in bioql PyPI...
EUVD-2022-0140
Malicious code in bioql PyPI...
EUVD-2022-0139
Malicious code in bioql PyPI...
libdwarf:fuzz_crc_32: Heap-buffer-overflow in _dwarf_macho_load_dwarf_sections
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4931308642172928 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzcrc32 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...
Linux Distros Unpatched Vulnerability : CVE-2022-38495
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function printbinary at /c/machoreader.c. CVE-2022-38495 Note that Nessus relies on...
Linux Distros Unpatched Vulnerability : CVE-2019-19648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the machoparsefile functionality in macho/macho.c of YARA 3.11.0, commandsize may be inconsistent with the real size. A specially crafted MachO file can caus...
Linux Distros Unpatched Vulnerability : CVE-2021-41771
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImportedSymbols in debug/macho for Open or OpenFat in Go before 1.16.10 and 1.17.x before 1.17.3 Accesses a Memory Location After the End of a Buffer, aka an...