730 matches found
trustlock
trustlock Git 네이티브 의존성 승인 컨트롤러입니다. 모든 의존성 변경 시 신뢰 신호를 평가합니다. 작동 방식 trustlock은 Git pre-commit 훅권고 모드과 CI 검사강제 모드로 실행됩니다: 권고 pre-commit: 위반 시 경고, 종료 코드 0, 모든 패키지가 승인되면 신뢰 기준선을 업데이트합니다. 강제 --enforce: 위반 시 차단, 종료 코드 1, 기준선을 업데이트하지 않습니다. 패키지별 평가 신뢰 신호: 쿨다운Cooldown — 레지스트리에 게시된 이후 경과 시간 출처Provenance —...
loupe
Loupe Loupeは、デバイスフィンガープリントの表面を実践的に探索できるiOS／iPadOSアプリです。公開されたiOS API（サードパーティ製アプリなら誰でも呼び出せるものと同じAPI）から実際の値を読み取り、そのまま表示します。目的は単純です。自分のiPhoneが静かに何をさらしているのか、そしてそれぞれの読み取り値がなぜアプリによる再認識に役立つのかを確認することです。...
SigDigger
SigDigger - フリーのデジタル信号アナライザ SigDigger は GNU/Linux および macOS 向けのフリーのデジタル信号アナライザで、未知の無線信号から情報を抽出するために設計されています。SoapySDR を通じてさまざまな SDR デバイスをサポートし、FSK、PSK、ASK 信号の調整可能な復調、アナログビデオのデコード、バースト信号の解析、アナログ音声チャンネルの聴取（すべてリアルタイム）を可能にします。 既存ユーザー向けの注意事項 もう develop...
wigle-wifi-wardriving
WiGLE 무선 워드라이빙 Android용 네트워크 스텀블링 클라이언트, wigle.net에서 제공. 이 클라이언트는 Android 기기를 사용하여 WiFi, Bluetooth 및 셀룰러 신호의 위치 기반 탐지 및 로깅을 제공합니다. 2023년 1월 기준으로 이 애플리케이션은 Android SDK 버전 24누가 이상을 지원합니다. 이전 버전의 경우 2.67 릴리스 태그를 참조하여 직접 빌드하거나 컴파일된 아티팩트를 사이드로드하세요. 참고 로 이전 릴리스는 WiGLE.net API 호출에 대한 인증서 투명성 검사에 실패합니다. ...
ai-email-threat-research
위협 터미널 AI 생성 피싱 이메일을 인간이 얼마나 잘 탐지하는지 측정하는 사이버 보안 연구 게임입니다. 레트로 터미널 경험으로 제작되었습니다. 라이브: research.scottaltiparmak.com 문제 이제 AI는 완벽한 문법, 틀림없는 철자, 설득력 있는 맥락을 갖춘 피싱 이메일을 생성할 수 있습니다. 과거의 신호깨진 영어, 어색한 표현, 명백한 오타는 더 이상 유효하지 않습니다. 그렇다면 2026년에 인간은 어떻게 피싱을 탐지할까요? 이것이 무엇인가 위협 터미널은 게임이자 실시간 연구 플랫폼입니다. 플레이어는 레트...
CVE-2026-93807
A flaw was found in the Linux kernel's Redpine Signals RSI Wi-Fi driver. An attacker can trigger a Denial of Service DoS or information disclosure by configuring wireless encryption keys for ciphers with shorter key lengths than the Temporal Key Integrity Protocol TKIP. The driver unconditionally...
CVE-2026-93802
A flaw was found in the Linux kernel's Redpine Signals rsi Wi-Fi driver. The driver fails to validate the length of a beacon frame against available buffer space before copying data into a management buffer. An attacker could exploit this issue by triggering the transmission or processing of an...
GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)
Whitepaper called GitHub Engagement Signals For CVE Prioritization: The GitHub Popularity Metric GPM...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2023-002892)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002892 advisory. DISPUTED An issue was discovered in PostgreSQL 12.2 allows attackers to cause a denial of service via repeatedly sending SIGHUP signals. NOTE: this is disputed by th...
CVE-2026-93676
xdg-dbus-proxy incorrectly filters D-Bus broadcast messages, bypassing configured path, interface, and member restrictions. This allows a sandboxed Flatpak application to intercept broadcast signals on the D-Bus session bus and AT-SPI bus that should be restricted, potentially exposing sensitive...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in various contexts. When a program running in a non-preemptible context uses the bpfsendsignal function, issues may arise because this function can enter ...
Astra Linux – Vulnerability in glib2.0
A issue was discovered in GNOME GLib before version 2.78.5, and also in versions 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus...
Astra Linux – Vulnerability in PostgresSQL 11
A vulnerability was discovered in PostgreSQL 12.2, allowing attackers to cause a denial of service by repeatedly sending SIGHUP signals. NOTE: This claim is disputed by the vendor, as untrusted users are unable to send SIGHUP signals; such signals can only be sent by a PostgreSQL superuser, a use...
fingerprint-pro-internals
Fingerprint Pro v4, deobfuscated and documented 143 signals named. The bundle unpacked. The wire format decoded. Run it on your browser · Read the docs · Signal map · Collector sources...
EUVD-2026-46178
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...
CVE-2026-59845
CVE-2026-59845 describes a vulnerability in the libssh library where, when using the ProxyCommand feature, an unchecked fork() failure can be stored as PID -1. During cleanup, signals may be sent across the caller’s process tree, enabling local denial of service. The Red Hat advisory confirms thi...
CVE-2026-59845: Detection of Error Condition Without Action
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...
PT-2026-61859
Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh when using the ProxyCommand feature. An unchecked failure in the fork function can result in a process ID of -1 being stored. During the cleanup process, signals may be...
MAL-2026-10690 Malicious code in qwen-asr-pvt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8b2f6db0443a648cdf03348c8dd9351568469f84b8d61022f1ed1da2a330e The package's pyproject.toml declares an unpinned runtime dependency on transformers4576, a lookalike of the widely used HuggingFace transformers...
