ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports digital signatures for ODF documents and macros within documents. It provides visual aids to indicate that the document has not been altered since the last signature, and that the signature is valid. A vulnerability in certificate validation in LibreOffice allowed attackers t...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports digital signatures for ODF documents and macros within documents. It provides visual indicators that confirm that the document has not been altered since the last signature, and that the signature is valid. A vulnerability in certificate validation in LibreOffice allowed...

machscope

machscope machscope は、macOS のプロセス、launchd ジョブ、Mach サービス、バンドル、署名、エンタイトルメント、Mach-O のリンケージをすべてひとつの探索可能なグラフにまとめる、ターミナルネイティブの macOS 探索ツールです。 あるシンプルな問いに、残酷なまでに正確に答えるために存在します。 このプロセス、サービス、バイナリ、バンドルは、実際に何に接続されているのか？ プロセス 、実行ファイル 、launchd ジョブ 、Mach サービス 、バンドル 、組み込み XPC サービス 、コード署名 、エンタイトルメント 、Mach-O リンケージ...

codecrypt

Codecrypt 后量子密码学工具。 Codecrypt 目前不再维护，不过我至今仍在使用它。如果你有兴趣开发/维护它，请联系我。 关于 这是一个类似 GnuPG 的 Unix 程序，用于加密和签名，仅使用抗量子计算机的算法： McEliece 密码系统（紧凑型 QC-MDPC 变体）用于加密 基于哈希的 Merkle 树算法（FMTSeq 变体）用于数字签名 Codecrypt 是自由软件。代码以 LGPL3 条款授权，希望这能使其更容易与其他工具组合使用。 为什么选择这个？ 去读读 http://pqcrypto.org/ 链接...

signatures

Signatures This repository is designed to provide a way to create and distribute detection signatures easily. Get creative with your own detection solutions, completely unencumbered by license limitations. To help combat evil, we firmly commit our work to the public domain for the greater good of...

cve-2025-8088

CVE-2025-8088: WinRAR パストラバーサル検出 概要 このリポジトリは、WinRAR のパストラバーサル脆弱性である CVE-2025-8088 に関する調査と検出戦略を文書化しています。この脆弱性を悪用すると、攻撃者は本来のディレクトリ外にファイルを抽出でき、システム侵害につながる可能性があります。 Travis via Corelight は、CVE-2025-8088 の悪用試行を識別するためのネットワークベースの検出シグネチャと分析を開発し公開しました。 参考文献 ESET Research CVE-2025-8088 の詳細 サンプル @ any.run 連絡...

qubes-secpack

Qubes 安全包（qubes-secpack） Qubes 安全包（qubes-secpack） 是一个包含 Qubes OS 项目安全相关信息的 git 仓库。它包含以下内容： Qubes PGP 密钥（keys/） Qubes 安全公告（QSBs/） Qubes 金丝雀（canaries/） Qubes 资金信息（fund/） Qubes ISO 摘要（digests/） 本仓库中包含的文件可以通过两种方式进行认证： 通过验证 git 提交标签（git tag -v） 通过验证分离的 PGP 签名，这些签名针对此处包含的大多数文件提供（例如，各个 QSB、金丝雀及其他公告） Qub...

aqua-checksums

aqua-checksums 面向 Aqua Security 开源项目的外部供应链完整性监控。 本仓库的用途 本仓库持续监控 Aqua Security 已发布制品（容器镜像、GitHub 版本发布、Git 标签及发布资产）的完整性，通过随时间记录并校验加密摘要来实现。对于已签名制品，还会对照 Rekor 透明日志验证 Sigstore cosign 签名。 一个定时调度的 GitHub Actions 工作流每 10 分钟运行一次，将当前制品摘要与先前记录的状态进行比较。如果任何摘要发生意外变化，工作流将失败并创建包含详细信息的 GitHub Issue。 为什么外部监控很重要...

Rocky Linux 8 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / nss-softokn / etc (crlsa-2021_4903)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214903 advisory. nss: Memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS CVE-2021-43527 Tenable has extracted the preceding description block directly from...

Rocky Linux 8 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2024_5598)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245598 advisory. libreoffice: bility to trust not validated macro signatures removed in high security mode CVE-2024-6472 Tenable has extracted the preceding description block direct...

AlmaLinux 9.2 [TuxCare] Security Update: thunderbird Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785560172)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785560172 advisory. - Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would ...

CVE-2026-55174

UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility shims, and profile-based review scopes. Prior to version 4.2.0, UltrafastSecp256k1's ECDSA adaptor pre-signature verification accepts forged adaptor pre-signatures whose "r"...

CVE-2026-47554

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...

DEBIAN-CVE-2026-47554

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...

UBUNTU-CVE-2026-47554

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...

CVE-2026-47554

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...

CVE-2026-55174 UltrafastSecp256k1: ECDSA adaptor verification accepts non-adaptable pre-signatures due to missing DLEQ binding

UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility shims, and profile-based review scopes. Prior to version 4.2.0, UltrafastSecp256k1's ECDSA adaptor pre-signature verification accepts forged adaptor pre-signatures whose "r"...

EUVD-2026-90188

UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility shims, and profile-based review scopes. Prior to version 4.2.0, UltrafastSecp256k1's ECDSA adaptor pre-signature verification accepts forged adaptor pre-signatures whose "r"...

Improper Validation Of Nested Digest Algorithm Sequence Elements

node-forge is vulnerable to improper validation of nested DigestAlgorithm sequence elements. The vulnerability is due to insufficient validation of element counts in the DigestAlgorithm sequence, which allows an attacker to insert garbage bytes and forge valid signatures for arbitrary messages wh...