745 matches found
GHSA-FM79-3F68-H2FC vulnerabilities
Vulnerabilities for packages: zed, zellij, yara-x, wizer, wasmcloud...
CVE-2025-53901 vulnerabilities
Vulnerabilities for packages: wizer, wasmcloud, zed, zellij, yara-x...
GHSA-FM79-3F68-H2FC vulnerabilities
Vulnerabilities for packages: wizer, wasmcloud, zed, zellij, yara-x...
MAL-2025-5831 Malicious code in 182-23run (npm)
The package is malicious due to HTML injection in index.js redirecting to adult/malicious sites and a YARA match on a suspicious URL...
CVE-2019-5020
An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerabili...
Automatically Generating Rules of Malicious Software Packages Via Large Language Model
Today's security tools predominantly rely on predefined rules crafted by experts, making them poorly adapted to the emergence of software supply chain attacks. To tackle this limitation, we propose a novel tool, RuleLLM, which leverages large language models LLMs to automate rule generation for O...
GHSA-2GH3-RMM4-6RQ5 vulnerabilities
Vulnerabilities for packages: yara-x, qdrant, rust-analyzer, parseable...
GHSA-2GH3-RMM4-6RQ5 vulnerabilities
Vulnerabilities for packages: parseable, yara-x, ztunnel, qdrant, rust-analyzer...
Linux Distros Unpatched Vulnerability : CVE-2021-45429
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yrsetconfiguration in yara/libyara/libyara.c,...
synacktiv-rules
synacktiv-rules Public repository of Sigma and YARA/YARA-X ru...
Ubuntu: Security Advisory (USN-7177-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7177-1 yara vulnerability
It was discovered that YARA did not properly sanitize its configuration settings. An attacker could potentially exploit this issue to cause a denial of service...
USN-7177-1: YARA vulnerability
It was discovered that YARA did not properly sanitize its configuration settings. An attacker could potentially exploit this issue to cause a denial of service...
Ubuntu 22.04 LTS : YARA vulnerability (USN-7177-1)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7177-1 advisory. It was discovered that YARA did not properly sanitize its configuration settings. An attacker could potentially exploit this issue to cause a denial of service...
OSV-2024-1274 Segv on unknown address in yara_yyparse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523 Crash type: Segv on unknown address Crash state: yarayyparse yrlexparserulesfile cliloadyara...
PT-2024-40625 · Git +1 · Clamav
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state includes functions such as yara yyparse, yr lex...
Introducing pattern-based agentless malware detection using YARA rules
Wiz is expanding our existing detection capabilities to include pattern-based malware detection using YARA rules written by the Wiz Research team...
Security Bulletin: IBM Security QRadar Manager for YARA and SIGMA Rules App for IBM QRadar SIEM is vulnerable to using a component with a known vulnerability (CVE-2024-35195)
Summary The product includes a vulnerable component e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerability. Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local...
Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox
Detect CVE-2024-4367 Quick-and-dirty YARA detection rule for...
From Deepfakes to Malware: AI's Expanding Role in Cyber Attacks
Large language models LLMs powering artificial intelligence AI tools today could be exploited to develop self-augmenting malware capable of bypassing YARA rules. "Generative AI can be used to evade string-based YARA rules by augmenting the source code of small malware variants, effectively loweri...