95 matches found
hooker
Hooker: Android 应用程序自动动态分析工具 关于 Hooker 功能描述 Hooker 是一个用于 Android 应用程序动态分析的开源项目。该项目提供了多种工具和应用，可用于自动拦截并修改目标应用所发出的任意 API 调用。 它利用 Android Substrate 框架来拦截这些调用，并汇总所有上下文信息（参数、返回值等）。收集的信息可以存储在 ElasticSearch 中，也可以保存为 JSON 文件。 此外，还提供了一套 Python 脚本，用于自动执行分析，以收集一组目标应用发出的所有 API 调用。 免责声明 Android-Hooker 是一个基于...
DROS-VEP-lite
🛡️ VEP: 開源 AI Agent 安全研究實驗台 Open Agent Security Research Testbed 專為「入侵後遏制 Post-Compromise」與「實體具身智能 Physical AI」打造之可自由組合系統層評測基礎設施 「VEP Vulnerability & Exploitability Protocol 是一套與特定產品實作解耦的開放研究評測規約，研究 Agent 安全控制在授權與實際系統執行邊界上的表現。DROS-VEP Lite 是 VEP 研究規約 RFC-010 的開源參考實作，提供評測 fixtures 與執行治理介面，供與其他 Agen...
The End of Trust: How Agentic AI Breaks Security Assumptions
For decades, the security of digital interaction has rested on an unacknowledged economic constraint. Attackers faced a tradeoff between the fidelity of a deception and the scale at which it could be deployed. Convincing impersonation required sustained human effort and was confined to a narrow s...
MAL-2026-2213 Malicious code in @virtahealth/substrate-root (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8348bbc19210fd9962510b31c4e08572ba739767bd183a4c867071a9a5f9d18 The package @virtahealth/substrate-root was found to contain malicious code. Source: google-open-source-security...
CSTS: A Canonical Security Telemetry Substrate for AI-Native Cyber Detection
AI-driven cybersecurity systems often fail under cross-environment deployment due to fragmented, event-centric telemetry representations. We introduce the Canonical Security Telemetry Substrate CSTS, an entity-relational abstraction that enforces identity persistence, typed relationships, and...
Malicious code in async-substrate-interface-sub (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-1894 Malicious code in async-substrate-interface-sub (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2021-41138
Frontier is Substrate's Ethereum compatibility layer. In the newly introduced signed Frontier-specific extrinsic for pallet-ethereum, a large part of transaction validation logic was only called in transaction pool validation, but not in block execution. Malicious validators can take advantage of...
EUVD-2026-0930
Malicious code in async-substrate-interface-upgrade PyPI...
EUVD-2001-0494
Malware in sbrugna...
EUVD-2023-1743
Malicious code in bioql PyPI...
EUVD-2023-0996
Malicious code in bioql PyPI...
EUVD-2022-52750
Malicious code in bioql PyPI...
An Ultra-Sub-Wavelength Microwave Polarization Switch Implemented with Directed Surface Acoustic Waves in a Magnonic Crystal
The ability to switch the polarization of a transmitted electromagnetic wave from vertical to horizontal, or vice versa, is of great technological interest because of its many applications in long distance communication. Binary bits can be encoded in two orthogonal polarizations and transmitted...
CVE-2021-39193
Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in pallet-ethereum can cause invalid transactions to be included in the Ethereum block state in pallet-ethereum due to not validating the input data size. Any invalid...
Malware in substrate-faucet
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in substrate-faucet (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c694048c1a8c1f3c9b8f183f75e0a9464e084cdaa8fc58c9a770190c4ab4824a Any computer that has this package installed or running should be considered...
Guillotine: Hypervisors for Isolating Malicious AIs
As AI models become more embedded in critical sectors like finance, healthcare, and the military, their inscrutable behavior poses ever-greater risks to society. To mitigate this risk, we propose Guillotine, a hypervisor architecture for sandboxing powerful AI models -- models that, by accident o...
PT-2025-7249 · Unknown · Orml Rewards
Name of the Vulnerable Software and Affected Versions: ORML Rewards pallet versions prior to the fixed version Description: A vulnerability in the add share function can lead to an uncaught Rust panic when handling user-provided input exceeding the u128 range. This issue affects any Substrate-bas...