CVE-2021-42574

CVE-2021-42574 - Générateur de code // Mise à jour : 05.11.2021 Il est désormais possible non seulement d'encoder, mais aussi de décoder les fichiers. Cela signifie que les fichiers contenant des caractères bidi pris en charge peuvent désormais être traduits en fichiers modèles avec des espaces...

unicode-control-characters-action

إجراء أحرف التحكم في Unicode إجراء GitHub للعثور على أحرف التحكم في Unicode باستخدام أداة تشخيص Red Hat https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 للكشف عن هجمات مصدر طروادة RHSB-2021-007 CVE-2021-42574,CVE-2021-42694 المدخلات args مطلوب وسائط البرنامج النصي الموثقة في...

TrojanSourceFinder

TrojanSourceFinder TrojanSourceFinder डेवलपर्स को स्रोत कोड में "Trojan Source" कमजोरी का पता लगाने में मदद करता है। Trojan Source कमजोरी एक हमलावर को दुर्भावनापूर्ण कोड को निर्दोष दिखाने की अनुमति देती है। सामान्य तौर पर, हमलावर अपने कोड को एक टिप्पणी दृश्य रूप से के रूप में पेश करके लुभाने की...

CVE-2021-42574

Trojan Source:Invisible Vulnerabilities - Code generator — بكل بساطة اختصارا الثغرة عبارة عن ان الكود يكون شكله غير عن يوم تجميعه : حيث يتمثل الهجوم في استخدام أحرف التحكم المضمنة في التعليقات والسلاسل لإعادة ترتيب أحرف التعليمات البرمجية المصدر بطريقة تغير منطقها. مثال لنفترض الكود كذا : if...

bidi-guard

bidi-guard افحص الكود بحثًا عن أحرف يونيكود ثنائية الاتجاه غير مرئية لماذا وُجدت هذه الأداة؟ يمكن لأحرف يونيكود ثنائية الاتجاه غير المرئية أن تجعل الكود المصدري يُعرض بشكل مختلف عمّا يُنفَّذ. هذه هي ثغرة CVE-2021-42574 — هجوم Trojan Source. يُضمّن المهاجم أحرفًا تعكس اتجاه النص. عند مراجعة الكود،...

nullorigin

NullOrigin 🛡️ وسيط عالمي لتنقية المصدر الرقمي والعلامات المائية أداة بحثية — لأغراض تقييم متانة العلامات المائية فقط. 🔬 للاستخدام البحثي فقط NullOrigin أداة بحثية. صُنعت لدعم الدراسة الأكاديمية والمستقلة لمتانة العلامات المائية، ولا شيء غير ذلك. أنظمة العلامات المائية هي ادعاءات أمنية، والادعاءات...

MiracleLinux 8 : gcc-toolset-10-annobin-9.29-1.el8.2, gcc-toolset-10-gcc-10.3.1-1.2.el8 (AXSA:2021-2881:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2881:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 7 : binutils-2.27-44.base.el7.1 (AXSA:2021-2508:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2508:04 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : annobin-9.72-1.el8.2 (AXSA:2022-2958:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2958:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-8.5.0-4.el8 (AXSA:2022-2957:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2957:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : binutils-2.30-108.el8.1 (AXSA:2022-2955:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2955:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-toolset-11-annobin-9.85-1.el8.1, gcc-toolset-11-binutils-2.36.1-1.el8.1, gcc-toolset-11-gcc-11.2.1-1.2.el8 (AXSA:2021-2882:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2882:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : llvm-toolset:rhel8 (AXSA:2022-2984:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2984:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-toolset-10-binutils-2.35-8.el8.6 (AXSA:2021-2879:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2879:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

RHEL 8 : gcc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Developer environment: Homoglyph characters can lead to trojan source attack CVE-2021-42694 - The...

RHEL 8 : developer_environment (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Developer environment: Homoglyph characters can lead to trojan source attack CVE-2021-42694 - An issue wa...

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

A malicious Python package on the Python Package Index PyPI repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, and comes with capabilities to harvest and...

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

A malicious Python package on the Python Package Index PyPI repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware. The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, and comes with capabilities to harvest and...

CLSA-2022-1646060667 Fix of CVE: CVE-2021-42574, CVE-2018-20673

CVE-2021-42574: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks 2008391 - CVE-2018-20673: libiberty: Integer overflow in demangletemplate function 1668394...

CLSA-2022-1645466518 Fix of CVE: CVE-2021-20284, CVE-2021-20197, CVE-2021-42574, CVE-2021-3487, CVE-2020-35448

CVE-2021-42574: Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks 2009172 - CVE-2021-20284: Heap-based buffer overflow in bfdelfslurpsecondaryrelocsection in elf.c 1961526 - CVE-2020-35448: Heap-based buffer overflow in bfdgetlsigned32 in...