peframe

peframe peframe एक ओपन सोर्स टूल है जो पोर्टेबल निष्पादन योग्य मैलवेयर और सामान्य संदिग्ध फ़ाइलों पर स्थैतिक विश्लेषण करने के लिए उपयोग किया जाता है। यह मैलवेयर शोधकर्ताओं को पैकर, XOR, डिजिटल हस्ताक्षर, म्यूटेक्स, एंटी डीबग, एंटी वर्चुअल मशीन, संदिग्ध सेक्शन और फंक्शन, मैक्रो और संदिग्ध फ़ाइलों ...

MalwareForge---Advanced-Static-Malware-Analyzer

🛡️ MalwareForge - Analyseur statique de malwares avancé MalwareForge est un outil puissant d'analyse statique de malwares qui détecte un comportement malveillant sans exécuter le fichier. ✨ Fonctionnalités 🦠 Analyse du comportement : Injection de processus, Persistance, Réseau, Vol de données,...

packer-tutorial

جدول المحتويات 1. ما هو المُعبئ؟ : مقدمة إلى الغرض من المُعبئات ودليل عبر ما هي ضروريات تطوير المُعبئ. 2. المتطلبات الأساسية : الأدوات اللازمة للعمل مع هذا البرنامج التعليمي. 3. تجربة سريعة : عرض توضيحي لما ستبنيه باستخدام هذا البرنامج التعليمي. 4. رسم مشروع CMake الخاص بنا : درس مصغّر عن CMake ح...

GO-2026-6569 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge...

CVE-2026-56855 affecting package packer for versions less than 1.9.5-21

CVE-2026-56855 affecting package packer for versions less than 1.9.5-21. A patched version of the package is available...

CVE-2026-78662 affecting package packer for versions less than 1.9.5-21

CVE-2026-78662 affecting package packer for versions less than 1.9.5-21. A patched version of the package is available...

PT-2026-105588

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, k8sgpt, rancher-helm, manifest-tool, redpanda-operator, neuvector, harvester-fips, kubescape-server-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, trivy-operator-fips, cloudbeat, consul-k8s, trivy-operator, gatekeeper,...

GHSA-PG57-6JWG-Q645 vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, k8sgpt, rancher-helm, manifest-tool, redpanda-operator, neuvector, harvester-fips, kubescape-server-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, trivy-operator-fips, cloudbeat, consul-k8s, trivy-operator, gatekeeper,...

GHSA-GFW4-49F9-CP25 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads a 32-bit payload length from the message header and previously allocated a buffer of that size without enforcing an upper bound. An authenticated peer that can establish a viaduct...

EUVD-2026-84004

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub...

KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads a 32-bit payload length from the message header and previously allocated a buffer of that size without enforcing an upper bound. An authenticated peer that can establish a viaduct...

CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...

CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...

CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...

CVE-2026-62370

KubeEdge is vulnerable to an unbounded memory allocation in the pkg/viaduct/pkg/packer component. The Reader.Read function trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct message-processing path and allocates memory before validating an upper bound. An authenticat...

CVE-2026-62370: Memory Allocation with Excessive Size Value

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...

PT-2026-96167

Name of the Vulnerable Software and Affected Versions KubeEdge versions 1.0.0 through 1.21.1 KubeEdge versions 1.22.0 through 1.22.1 KubeEdge versions 1.23.0 through 1.23.0 Description The Reader.Read function in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received via the...

AZL-103254 CVE-2026-88922 affecting package packer 1.9.5-21

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this...

AZL-99321 CVE-2026-78662 affecting package packer for versions less than 1.9.5-21

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...