spectre-attack-example

Exemple d'attaque Spectre 2 janvier 2018 CVE-2017-5753 et CVE-2017-5715 Exemple d'exploitation de la vulnérabilité Spectre « Ghost » Qu'est-ce que c'est ? Nous plaçons le texte « The Magic Words are Squeamish Ossifrage. » en mémoire, puis nous essayons de le lire en exploitant la vulnérabilité. S...

Malicious code in dext-crate-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329047f71cd6b35084bea7ed22978ba88e02cb557a5490b6133a70a5a0859a19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

pisc

공개 OCI-이미지 보안 검사기 설명 PISCPublic OCI-Image 또는 docker-image Security Checker는 OCI 컨테이너 이미지의 보안을 평가하는 명령줄 도구입니다. 다음 조건 중 하나라도 충족되면 코드 1로 종료됩니다: 멀웨어 🍄 익스플로잇 🐙, 해킹 도구 👾, 백도어 🐴, 암호화폐 채굴기 💰, 기타 💩 virustotal 기준 악용 가능한 중요 취약점 🐞 trivy, grype, epss, inthewild.io 기준 이미지 잘못된 구성 🐳 CVE-2024-21626 등 오래된 생성 날짜 📆...

CVE-2026-0047-poc

CVE-2026-0047: Отсутствие проверки разрешений в ActivityManagerService Куча битмапов, украденных из каждого работающего приложения — ноль разрешений, ноль взаимодействия с пользователем. Отсутствие проверки enforceCallingOrSelfPermissionDUMP в ActivityManagerService.dumpBitmapsProto позволяет...

dllspy

DllSpy Analyse les assemblys .NET compilés pour découvrir les surfaces d'entrée points de terminaison HTTP, hubs SignalR, services WCF, services gRPC, pages Razor, composants Blazor, fonctions Azure, points de terminaison OData, vérifier la configuration d'autorisation et signaler des problèmes d...

malware-check

설치 - 사용법 - 동적 분석 - YARA 규칙 - CI/CD 문서: English | Tiếng Việt 악성 코드, 의심스러운 바이너리 및 개인정보 침해를 탐지하기 위한 정적 및 동적 분석 도구입니다. 소스 코드, 컴파일된 실행 파일.exe, .dll, .elf, macOS 번들.app, .dmg, .pkg, 모바일 앱.apk, .ipa 및 애플리케이션 패키지를 YARA 규칙, Docker 샌드박스 기반 행동 분석, MobSF 모바일 분석, 페이로드 난독화 해제 및 다중 형식 보고서JSON, HTML, SARIF로...

CVE-2026-74649

A flaw was found in the Linux kernel's rtl8723bs driver. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted Wi-Fi Protected Equivalent Privacy WEP shared-key authentication challenge. This could lead to an out-of-bounds write or information disclosure due ...

CVE-2026-74595

A flaw was found in the Linux kernel's fscrypt component. When setting an encryption policy on an idmapped mount, the fscryptioctlsetpolicy function incorrectly performs an owner check. This vulnerability can lead to legitimate users being denied access to set encryption policies, while...

checkvulnCVE20205902

checkvulnCVE20205902 一个用于检查IP列表中CVE-2020-5902漏洞的PowerShell脚本。 说明在代码中。 保持安全！...

CVE-2026-56865

A flaw was found in golang.org/x/mod/sumdb/tlog. A malicious Go proxy GOPROXY could exploit this vulnerability by forging sumdb tiles. This allowed the proxy to bypass integrity checks and serve malicious module content to a local Go module cache, which would then go undetected by the transparenc...

Check Risk WAF

Check Risk WAF Solution cloud WAF complète russe pour la protection des applications web et de l'infrastructure Solution cloud WAF intégrée russe pour la protection des applications web et de l'infrastructure Site · Documentation · Russe · Anglais...

ai-code-review

🔍 codereview Проверка кода с помощью ИИ прямо в терминале. Одна команда. Мгновенная обратная связь. Находит уязвимости, ошибки и плохие паттерны до того, как они попадут в продакшн. Установка · Быстрый старт · Использование · Провайдеры · Вклад Что это такое codereview отправляет ваш код в LLM и...

CVE-2025-4631

🚨 CVE-2025-4631 - Exploit d'élévation de privilèges du plugin WordPress Profitori 📌 Résumé de la vulnérabilité Le plugin Profitori versions 2.0.6.0 à 2.1.1.3 est vulnérable à une élévation de privilèges non authentifiée en raison d'un contrôle de capacité manquant dans le point de terminaison...

docf-sec-check

DocF-Sec-Check Description DocF-Sec-Check aide à rendre vos commandes Dockerfile plus sécurisées. Capture d'écran...

CVE-2026-31694-POC

CVE-2026-31694: Écriture hors limites dans le cache readdir de FUSE Un contrôle de limites manquant dans fs/fuse/readdir.c:fuseadddirenttocache. Un serveur FUSE renvoie un dirent avec namelen = 4095, qui se sérialise en un enregistrement de 4120 octets. Le noyau le copie dans une seule page de...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce = 1.5.0 - Unauthenticated Arbitrary File Upload 💣 Pix for WooCommerce = 1.5.0 – Неавторизованная произвольная загрузка файлов CVE-2026-3891 👤 Nxploited 🧩 Описание Плагин Pix for WooCommerce для WordPress уязвим к неавторизованной произвольной загрузке файлов из-з...

sqlsure

sqlsure L'IA écrit votre SQL. sqlsure garantit qu'il est correct. Une requête peut être parfaitement valide, s'exécuter sans erreur et renvoyer un nombre qui est silencieusement faux — un revenu compté deux fois par une jointure, une moyenne additionnée, un identifiant de patient exposé. Les base...

CVE-2026-59335 - UAA case insensitive check bypass | Cloud Foundry

Severity CVSSv4.0 – 7.7 — CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N CVSSv3.1 – 8.3 — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N Vendor CloudFoundry Foundation Versions Affected Severity is High unless otherwise noted. UAA All versions prior to v78.16.0 CF Deployment All...