nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

flipper-template

Flipper Zero Zig 模板 一个现代、生产就绪的模板，用于使用 Zig 编程语言开发 Flipper Zero 应用程序。该项目提供了一个流线化的构建系统，将 Zig 与 Flipper Zero SDK 相结合，使开发者能够为 Flipper Zero 平台编写类型安全、内存安全的应用程序。 概述 该模板将 Zig 强大的构建系统及语言特性与 Flipper Zero 固件开发套件相连接。它处理了 Zig 的 ARM Cortex-M4 交叉编译与 Flipper SDK 之间的复杂集成，为自定义应用程序提供了一个干净的起点。 主要特性 原生 Zig 支持 ：完全使用 Zi...

xz-cve-2024-3094

CVE-2024-3094 技术分析：XZ Utils 供应链后门 作者 Dorpe Karl Seyram 日期 2026-01-25 背景 本项目的目标是从安全工程师/蓝队视角分析一个真实、现代、高影响力的漏洞（CVE-2024-3094）。重点不在于漏洞利用，而在于理解根本原因、攻击链、对系统的影响，以及防御者如何检测和缓解类似的供应链攻击。 选择此项目的原因是，CVE-2024-3094 代表了 Linux 生态系统中最高级的供应链入侵事件之一，展示了对核心基础设施的信任如何被滥用。 过程 本项目在 Kali Linux 上使用轻量级分析环境完成，无需虚拟机或重型实验基础设施。...

cve-2024-3094

🛡️ 网络安全项目：分析 liblzma 中的 XZ 后门 📄 概述 本项目分析了在 xz-utils liblzma 中发现的高度隐蔽后门，影响版本 5.6.0 和 5.6.1 。引入上游构建系统的恶意代码通过修改 sshd 在运行时与 LZMA 压缩库的交互方式，针对 SSH 认证进行攻击。 ⚠️ 本项目仅用于教育和防御性研究 目的。 受害机器 克隆此仓库 root@kitploit: git clone https://github.com/valeriot30/cve-2024-3094 进入目录 root@kitploit: cd cve-2024-3094 启动 docker...

xz-backdoor-research

Toolkit di Ricerca CVE-2024-3094 Di Nikolaos Natsopoulos , Consulente IAM Strumento interattivo basato su browser che accompagna il report di ricerca: "CVE-2024-3094: Compromissione della Supply Chain tramite Ingegneria Sociale e Manipolazione del Sistema di Build in XZ Utils"...

packer-tutorial

Inhaltsverzeichnis 1. Was ist ein Packer? : Eine Einführung in den Zweck von Packern und ein Leitfaden durch die Entwicklungserfordernisse eines Packers. 2. Voraussetzungen : Werkzeuge, die du für dieses Tutorial benötigst. 3. Ein Vorgeschmack : Eine Demonstration dessen, was du mit diesem Tutori...

MINI-RPG2-W5CX-H3PX

Bulletin has no description...

GO-2024-2920 vulnerabilities

Vulnerabilities for packages: melange, zot, guac, dagger...

CLEANSTART-2026-SG48140 Security fixes in melange 0.56.1-r1

Package melange version 0.56.1-r1 fixes 22 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-54174, CVE-2026-39830, CVE-2026-39831...

Linux Distros Unpatched Vulnerability : CVE-2026-19548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root caus...

GHSA-H443-HX93-M7QC vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-qemu-melange, linux-gcp...

CVE-2026-19011

CVE-2026-19011 affects TinyAGI 0.0.20. The vulnerable element is the function buildSystemPrompt in packages/server/src/routes/agents.ts, where manipulation can cause file inclusion. The attack may be initiated remotely and, per the description, the exploit is public. No remediation details are pr...

EUVD-2026-53791

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011 TinyAGI agents.ts buildSystemPrompt file inclusion

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011 TinyAGI agents.ts buildSystemPrompt file inclusion

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

MAL-2026-5926 Malicious code in test-copppss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03106e028cee7749b7f3a9b327142fc0a402574bc72f3a62d129aa891afe85fe On npm install, the package's preinstall hook node index.js /dev/null 2&1 runs a shell pipeline that collects host identifiers — hostname, pwd, whoam...

[SECURITY] Fedora 43 Update: perl-ExtUtils-Builder-0.020-1.fc43

Writing extensions for various build tools can be a daunting task. This module tries to abstract steps of build processes into reusable building blocks for creating platform and build system agnostic executable descriptions of work...

Malicious Package

Overview app-config-utility is a malicious package. This package contains malicious code, and its content has been removed from the official package manager. While this package typosquats well-known libraries to impersonate valid open-source ecosystems, there is no connection between those...

Malicious code in wdb-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddd306d024c4dd394d19c1adb610389f239fa619d25fff4f75b857a678da0ee package.json declares "preinstall": "./vendor/setup", which on every npm install invokes a 976568-byte Linux x86 ELF binary shipped inside the packag...

Fedora 43 : python-pulp-glue / python-requests (2026-8ad863685a)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-8ad863685a advisory. 2.33.1 2026-03-30 ------------------- Bugfixes - Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary files in the tmp directory. - Fixed...