dae

dae 简体中文 Config-driven Dart AOT snapshot analyzer and debug-info exporter. No Dart SDK, never runs the target: locates the embedded snapshot inside Mach-O / ELF / PE, exports the same symbols and structs as blutter for IDA / radare2 / Frida with six deliberate corrections where the reference it w...

aotopsy

AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...

sc2pe

sc2pe Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit PE. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate how...

sc2elf

sc2elf Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit ELF. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate...

blutter

Blutter Herramienta de ingeniería inversa de aplicaciones móviles Flutter mediante la compilación del tiempo de ejecución AOT de Dart Actualmente la aplicación solo soporta libapp.so de Android solo arm64. Además, la aplicación actualmente solo funciona contra versiones recientes de Dart. Para...

aotopsy v1.1.0

AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...

wamr:wamr_fuzz_aot_compiler: Crash in llvm::RegisterTargetMachine<llvm::X86TargetMachine>::Allocator

Detailed Report: https://oss-fuzz.com/testcase?key=4622114757083136 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzaotcompiler Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100000004 Crash State: llvm::RegisterTargetMachine::Allocator...

Always-Incorrect Control Flow Implementation

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation when compiling model with torch.rot90 and torch.randnlike functions while...

Reachable Assertion

Overview Affected versions of this package are vulnerable to Reachable Assertion in the torch.linalg.lu function. In AOTAutograd mode LU decomposition can't accept slice operation and An attacker can cause the application to become unresponsive or crash if backend="aoteager" by providing speciall...

Reachable Assertion

Overview torch is a Tensors and Dynamic neural networks in Python with strong GPU acceleration Affected versions of this package are vulnerable to Reachable Assertion in the torch.linalg.lu function. In AOTAutograd mode LU decomposition can't accept slice operation and An attacker can cause the...

Malicious Package

Overview aot-npm-package is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in aot-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387dbb36bb1161598fbfa2872fbf071892696c3a1df11c616ffa424495bacdb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in aot-npm-package

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47473 Malicious code in aot-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387dbb36bb1161598fbfa2872fbf071892696c3a1df11c616ffa424495bacdb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via a flaw in the certificate validation logic, which accepts properly constructed certificates from any Certificate Authority CA without properly verifying the trust chain. An attacker can use this to...

wamr:wamr_fuzz_classic_interp: Crash in load_init_data_section

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6593826544484352 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzclassicinterp Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

wamr:wamr_fuzz_aot_compiler: Crash in check_block_stack

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5206320594878464 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzaotcompiler Job Type: libfuzzerubsanwamr Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

This Week in Spring – March 18th, 2025

Hi, Spring fans! I just got back from the amazing JavaOne show held in Redwood Shores. It was a fun, uproarious event and a great chance to reconnect with tons of friends, old and new. I love this community! One of the central highlights of this show? Java 24 is here, finally! And, as usual, we'v...

wamr:wasm_mutator_fuzz_loader: Heap-buffer-overflow in aot_instantiate

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5300312985894912 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 8...

PVS Server Down In Console After Upgrade to 2402CU1

After upgrading the first PVS Server in the FARM to 2402 CU1 and running the Configuration Wizard the PVS Server appears down in the console. The Configuration Wizard completes with errors. The following is one example found in the AOT logs:...