bash-cve-2014-6271-fixes

CVE-2014-6271パッチ for bash 元のメーリングリストの投稿では、認証されていないHTTP経由でのみパッチを取得できます。 ため息 これらのパッチをHTTP経由でダウンロードし、HTTPS経由で取得して独立して確認できるgitリポジトリに保存しました。 これらのファイルが本物かどうかは確認していませんが、同じファイルを持っているかどうかは独立して確認できます。 元の告知 SHA256SUMS == 上流パッチ == 以下から取得: http://ftp.gnu.org/pub/gnu/bash/bach--patches/ upstream/bash30-017...

rscrypto

rscrypto rscrypto 将密码学原语、加密与快速哈希、密码哈希以及校验和整合到一个功能模型中。面向目标的 SIMD 和汇编加速了可移植的 Rust 后端，无需生产级 C/FFI、OpenSSL 或系统库依赖。 rscrypto 是一个原语库，而非 TLS 协议栈、PKI 工具包、密钥存储或协议实现。 实测性能 2026-08-18 快照将提交 7eb44e9 与八个 Linux CI 运行器上每个平台、原语、操作和输入形状的最快匹配外部实现进行了比较。外部基线是逐案选择的，而非跨竞争对手取平均值。比值为 外部实现 / rscrypto；数值越高越好。 在 6,144...

masc

masc 2017年のCyperCampハッカソンで開発されたマルウェア（ウェブ）スキャナー。 概要 ホームページ PyPI 特徴 現時点では、あらゆるタイプのウェブサイト（カスタムまたはCMS）に対して利用可能な機能と、一部は特定のプラットフォームでのみ利用可能な機能があります。 OWASP WebMalwareScannerのチェックサム、YARAルールデータベース、およびClamAVエンジン（利用可能な場合）を使用して、あらゆるウェブサイトのマルウェアをスキャンします。 ウェブサイトの保護を向上させるためのクリーニング操作を実行します。...

aqua-checksums

aqua-checksums 面向 Aqua Security 开源项目的外部供应链完整性监控。 本仓库的用途 本仓库持续监控 Aqua Security 已发布制品（容器镜像、GitHub 版本发布、Git 标签及发布资产）的完整性，通过随时间记录并校验加密摘要来实现。对于已签名制品，还会对照 Rekor 透明日志验证 Sigstore cosign 签名。 一个定时调度的 GitHub Actions 工作流每 10 分钟运行一次，将当前制品摘要与先前记录的状态进行比较。如果任何摘要发生意外变化，工作流将失败并创建包含详细信息的 GitHub Issue。 为什么外部监控很重要...

AMSI-Bypass

AMSI-Bypass AMSI 触发器列表（VBA、JScript / VBScript） 参考 : MISC 104 - AMSI: Fonctionnement et Contournements 在 VBA、JScript 和 VBScript 中，AMSI 使用循环缓冲区记录指令，并维护一份被认为可疑的函数列表。使用这些黑名单函数中的任何一个，都会触发已注册的 AMSI 提供程序对循环缓冲区进行扫描。 本仓库包含以 CRC32 校验和形式定义的触发器列表，这些列表来自 VBE7.DLL、jscript.dll 和 vbscript.dll。列表采用 CSV...

cve-2024-12085

CVE-2024-12085 Infoleak 漏洞利用程序 注意，此漏洞利用程序并非通用！目标模块和校验和为硬编码。自动校验和计算尚未实现。 其他文件 port-forwarding.py 修改自 https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e。它用于捕获 rsync 服务器与客户端之间的流量。 checksum.py 是我实现自动校验和计算的尝试。我没有足够的时间来完成它。 test.sh 是一个用于测试 rsync 中堆分配的脚本。...

EUVD-2026-55397

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

CVE-2026-64007

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums

A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption a...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-32148

Insufficient Verification of Data Authenticity vulnerability in hexpm hex Hex.RemoteConverger module allows dependency integrity bypass via unverified lockfile checksums. Hex stores checksums for dependencies in the mix.lock file to ensure reproducible and integrity-checked builds. However,...

EUVD-2026-33788

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android allows a hacker to trigger a service failure.

The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0069

In verifySignature of ApkChecksums.java, there is a possible way to cause a crash due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 安全漏洞

Google Android is an open-source operating system based on Linux, developed by Google Inc. There is a security vulnerability in Google Android, which stems from a resource exhaustion issue in the verifySignature function found in ApkChecksums.java. This vulnerability may lead to local denial of...

Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums

...

rsync: rsync server leaks arbitrary client files

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare wi...

Linux Distros Unpatched Vulnerability : CVE-2026-9150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian...