[SECURITY] Fedora 36 Update: golang-github-shulhan-bindata-3.6.1-7.fc36

A small utility which generates Go code from any file. Useful for embedding binary data in a Go program...

[SECURITY] Fedora 36 Update: golang-github-schollz-mnemonicode-1.0.1-3.fc36

Mnemonicode is a method for encoding binary data into a sequence of words whi ch can be spoken over the phone, for example, and converted back to data on the other side...

[SECURITY] Fedora 36 Update: golang-github-appc-docker2aci-0.17.2-10.fc36

Docker2aci is a small library and CLI binary that converts Docker images to A CI. It takes as input either a file generated by "docker save" or a Docker regist ry URL. It gets all the layers of a Docker image and squashes them into an ACI image. Optionally, it can generate one ACI for each layer,...

[SECURITY] Fedora 36 Update: geoipupdate-4.9.0-3.fc36

The GeoIP Update program performs automatic updates of GeoIP2 binary database s...

[SECURITY] Fedora 36 Update: antlr4-project-4.9.3-6.fc36

ANTLR ANother Tool for Language Recognition is a powerful parser generator for reading, processing, executing, or translating structured text or binary files. It is widely used to build languages, tools, and frameworks. From a grammar, ANTLR generates a parser that can build and walk parse trees...

Metabase LFI (CVE-2021-41277)

Binary data metabaselficve-2021-41277.nbin...

Metabase API Detection

Binary data metabasedetect.nbin...

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

Schneider Electric IGSS Data Server Out-of-bounds Write (CVE-2022-32526)

Binary data schneiderelectricigsscve-2022-32526.nbin...

CVE-2022-34612

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function getlongobject. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary...

CVE-2022-34612

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function getlongobject. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary...

CVE-2022-34612

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function getlongobject. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary...

Rizin input validation vulnerability

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

Broadcom Fabric OS path traversal vulnerability

Broadcom Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Broadcom. A path traversal vulnerability exists in Broadcom Fabric OS versions 7.3.1d through 7.4.1b, which stems from an input validation error when handling directory traversal...

Terraform Configuration Detection for Linux/UNIX

Binary data terraformmaintfdetectnix.nbin...

EyesOfNetwork HTTP API Detection

Binary data eyesofnetworkwebapidetect.nbin...

Terraform Git Repo Detection for Linux/UNIX

Binary data terraformgitdetectnix.nbin...

Untrusted Search Path

Overview std/os/exec is a Go standard library package std/os/exec Affected versions of this package are vulnerable to Untrusted Search Path. Go Vulnerability Report: On Windows, executing Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset will unintentionally trigger...

GO-2022-0532 Empty Cmd.Path can trigger unintended binary in os/exec on Windows

On Windows, executing Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset will unintentionally trigger execution of any binaries in the working directory named either "..com" or "..exe"...