CVE-2022-34612

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function getlongobject. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary...

Rizin 输入验证错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

Terraform Git Repo Detection for Linux/UNIX

Binary data terraformgitdetectnix.nbin...

Terraform Configuration Detection for Linux/UNIX

Binary data terraformmaintfdetectnix.nbin...

EyesOfNetwork HTTP API Detection

Binary data eyesofnetworkwebapidetect.nbin...

Broadcom Fabric OS 路径遍历漏洞

Broadcom Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Broadcom. A path traversal vulnerability exists in Broadcom Fabric OS versions 7.3.1d through 7.4.1b, which stems from an input validation error when handling directory traversal...

Untrusted Search Path

Overview std/os/exec is a Go standard library package std/os/exec Affected versions of this package are vulnerable to Untrusted Search Path. Go Vulnerability Report: On Windows, executing Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset will unintentionally trigger...

GO-2022-0532 Empty Cmd.Path can trigger unintended binary in os/exec on Windows

On Windows, executing Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset will unintentionally trigger execution of any binaries in the working directory named either "..com" or "..exe"...

Hackers Increasingly Using WebAssembly Coded Cryptominers to Evade Detection

As many as 207 websites have been infected with malicious code designed to launch a cryptocurrency miner by leveraging WebAssembly Wasm on the browser. Web security company Sucuri, which published details of the campaign, said it launched an investigation after one of its clients had their comput...

Injection Vulnerability

go has injection vulnerability. The vulnerability exists due to a lack of sanitization in Cmd.Start in os/exec allowing execution of any binaries in the working directory named either "..com" or "..exe" by calling Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path is unset...

Splunk Installed (Linux)

Binary data splunknixinstalled.nbin...

Splunk Universal Forwarder Installed (Linux)

Binary data splunkuniversalforwardernixinstalled.nbin...

VMware Spring Cloud Config Installed

Binary data vmwarespringcloudconfiginstalled.nbin...

radare2 code issue vulnerability (CNVD-2023-06509)

radare2 is a set of libraries and tools for working with binary files. radare2 v5.7.2 contains a security vulnerability that stems from a NULL pointer dereference vulnerability discovered via the rbinfilextrloadbuffer function in bin/bfile.c. No detailed vulnerability details are available at thi...

VMware Spring Cloud Gateway Installed

Binary data vmwarespringcloudgatewayinstalled.nbin...

java-1.8.0-openjdk security, bug fix, and enhancement update

1:1.8.0.342.b07-1 - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use 'git apply' with...

java-1.8.0-openjdk security, bug fix, and enhancement update

1:1.8.0.342.b07-1 - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use 'git apply' with...

CVE-2022-34520

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function rbinfilextrloadbuffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service DOS via a crafted binary file...

CVE-2022-34502

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...

Heap overflow

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consumeencodednamenew at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted binary file...