APTSimulator

APT 시뮬레이터 중요: 테스트를 개발할 계획이 없다면, 단순히 ZIP 다운로드나 리포지토리를 클론하지 마십시오. 암호화된 아카이브에 일반 텍스트 샘플 및 도구가 포함되지 않은 패키지 버전이 들어 있는 릴리스의 패키지를 사용하십시오. APT 시뮬레이터는 시스템이 손상된 것처럼 보이게 만드는 도구 및 출력 파일 세트를 사용하는 Windows 배치 스크립트입니다. 다른 적대자 시뮬레이션 도구와 달리, APT 시뮬레이터는 애플리케이션을 가능한 한 간단하게 만들기 위해 설계되었습니다. 웹 서버, 데이터베이스 또는 일련의 가상 머신에...

scalpel

2013年6月27日現在、ScalpelはApache 2.0ライセンスの下でリリースされ、 ソースコードはThe Sleuth KitのGitHubリポジトリで入手できます。 現在、活発にメンテナンスされていません。Autopsyチームは、 Java/JNIバインディングを介して緊密に統合する作業を開始しましたが、 いくつかのメモリリークに遭遇し、その取り組みは放棄されました。 公式リリースは行われていません。プルリクエストを送信することはできますが、 レビューには時間がかかる場合があります。...

ph0neutria

ph0neutria ph0neutria 멀웨어 크롤러 v1.0.1 https://github.com/phage-nz/ph0neutria 참고: 이 프로젝트는 활발히 유지관리되지 않습니다. 소개 ph0neutria는 야생에서 직접 샘플을 수집하는 멀웨어 동물원 빌더입니다. 모든 것은 접근성과 관리 용이성을 위해 Viper에 저장됩니다. 이 프로젝트는 Ragpicker https://github.com/robbyFux/Ragpicker, 이전에는 "Malware Crawler"로 알려짐에서 영감을 받았습니다. 그러나...

CVE-2026-10066

The CVE concerns Shibby Tomato versions up to 1.28, specifically the UPS Service component. It affects the function sub_9068 in tomatoups.cgi, causing a stack-based buffer overflow that can be triggered remotely. The project is superseded by FreshTomato and targets products no longer supported by...

PYSEC-2026-5

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stlchecknormalvector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the...

CVE-2026-2653 admesh normals.c stl_check_normal_vector heap-based overflow

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stlchecknormalvector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the...

CVE-2025-54304

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. When they are powered on, an X11 display server is started. The display server listens on all network interfaces and is accessible over port 6000. The X11 access control list, by default, allows connections from...

CVE-2025-54304

The Thermo Fisher Ion Torrent OneTouch 2 INS1005527 device is vulnerable because its X11 display server starts on power-on and listens on all network interfaces via port 6000 . While the default access control list restricts connections to 127.0.0.1 and 192.168.2.15, devices assigned a different ...

CVE-2025-6945

GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments...

CVE-2025-6601

GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated users to gain unauthorized project access by exploiting the access request approval workflow...

CVE-2025-11974

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints...

CVE-2025-7739

An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions...

CVE-2025-6186

An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.1.4, and 18.2 before 18.2.2 that could have allowed authenticated users to achieve account takeover by injecting malicious HTML into work item names...

PT-2025-33039 · Crates.Io · Tsify-Next

The tsify-next crate is not maintained any more; use tsify instead...

Lack of sufficient checks in public API

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...

Out of bounds access in public safe API

Rows::rowunchecked allows out of bounds access to the underlying buffer without sufficient checks. The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead...

`backoff` is unmaintained.

The backoff crate is no longer actively maintained. For exponential backoffs/retrying, you can use the backon crate...

PT-2025-23647 · Crates.Io · Users

Affected versions append root to group listings, unless the correct listing has exactly 1024 groups. This affects both: - The supplementary groups of a user - The group access list of the current process If the caller uses this information for access control, this may lead to privilege...

Mozilla Firefox SEoL (47.x)

According to its version, Mozilla Firefox version install on the remote host has reached end of support. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may conta...

gtk-layer-shell-sys GTK3 bindings - no longer maintained

The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...