schrodingers-toctou

Schrödinger's TOCTOU "...'理智的编译器'的定义正变得越来越宽松。" 你运行的二进制文件并不是你编写的程序。编译器优化器会以你从未见过的方式重写 你的源代码——其中一些改动可以 悄无声息且合法地将看似安全的代码变成 存在漏洞的二进制文件。同一行代码可能 在一个编译器下安全，在另一个编译器下则可被利用， 而源码中没有任何线索告诉你究竟是哪种情况：一个处于叠加态的漏洞， 只有在构建时才会坍缩。Schrödinger's TOCTOU 探讨 编译器发明的加载操作及其对 检查时间到使用时间（TOCTOU）漏洞的广泛影响——这些问题 广泛存在于开源 内核, 虚拟机监控器,...

lexical-core has multiple soundness issues

RUSTSEC-2024-0377 contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls...

GHSA-C2HM-MJXV-89R4 Multiple soundness issues in lexical

lexical contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls MaybeUninit::assumeinit ...

abstractmachine.net XSS vulnerability

Vulnerable URL: http://www.abstractmachine.net/thesis/software.php?id=13'"170 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...