Argos

Argos — 区块链资产追踪平台 Argos 是一个多语言区块链调查平台，用于在以太坊和比特币上追踪、分析和可视化资金流动。基于 Rust、OCaml 和 TypeScript/React 构建。 架构 root@kitploit: +-----------------------+ | Frontend React 19 | | Vite + Tailwind CSS | +-----------+-----------+ | HTTP/REST +-----------v-----------+ | REST API Rust | | Axum — port 8990 | | | ...

infer

Infer Infer 是一款针对 Java、C++、Objective-C 和 C 的静态分析工具。Infer 使用 OCaml 编写。 安装 请阅读我们的入门指南页面，了解如何安装打包版本的 Infer。若要从源码构建 Infer，请参阅 INSTALL.md。 贡献 请参阅 CONTRIBUTING.md。 许可证 Infer 采用 MIT 许可证。 注意：启用 Java 支持可能需要您下载并安装依据 GPL 授权的组件。...

redexer

redexer Redexer 是一个用于操作 Android 应用二进制的重工程工具。 该工具能够将 DEX 文件解析为内存中的数据结构； 推断应用使用某些权限时的参数（我们称此功能为 RefineDroid）； 修改该数据结构并重新生成输出 DEX 文件（我们称这些功能为 Dr. Android，即 Dalvik 重写工具）。 出版物 Dr. Android and Mr. Hide: Fine-grained Permissions in Android Applications. Jinseong Jeon, Kristopher K. Micinski, Jeffrey A...

Astra Linux – Vulnerability in OpAM

In OCaml opam before version 2.5.1, a .install field containing a destination filepath can use ../ to access the parent directory...

Linux Distros Unpatched Vulnerability : CVE-2026-89087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

DEBIAN-CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89086

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS 1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key...

UBUNTU-CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

EUVD-2026-75709

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

CVE-2026-89087 affects the cstruct package for OCaml in versions before 6.3.0 . The root cause is an index mishandling issue. The assigned CVSS 3.1 score is 7.3 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating a network-reachable flaw requiring no privileges or user interac...

EUVD-2026-75708

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS 1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key...

CVE-2026-89086

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS 1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key...

CVE-2026-89086

In the jose package before 0.11.0 for OCaml, library calls to validate an RSA signature only confirm that PKCS 1 decoding succeeds, and proceed to declare the signature valid without the required steps that involve the public key...

OSEC-2026-19 JOSE: missing RSA signature verification

The opam package "jose" does not validate any RSA signature. It checks the encoding being PKCS1, but does not verify with the public key. Reproduction With jose 0.10.0, the code below signs two tokens with the same key and glues one's payload onto the other's signature: OCaml let =...

PT-2026-89718

Several functions in cstruct may use wrong data, leading to unexpected exceptions and return corrupted data. Impact - Cstruct.filter map writes retained bytes at their original input positions, producing corrupted output when earlier bytes are dropped. - Cstruct.tail rev:true removes two bytes...

PT-2026-89717

The opam package "jose" does not validate any RSA signature. It checks the encoding being PKCS1, but does not verify with the public key. Reproduction With jose 0.10.0, the code below signs two tokens with the same key and glues one's payload onto the other's signature: OCaml let = Mirage crypto...