Binvariants

Binvariants：面向二进制的寄存器级不变量引导模糊测试 本仓库为 Binvariants 的源代码：一个原型模糊测试框架，利用寄存器级潜在不变性违规对二进制程序进行模糊测试。 该工作发表于我们的论文 Binvariants: Enhancing Fuzzing of Closed-source Binary Executables via Register-level Likely Invariants，将出现在 2026 年 ACM 国际软件基础工程会议 FSE'26 上。 安装 Binvariants 使用 Binvariants 附加说明 Bug 奖杯展示 引用本仓库：|...

clawdstrike

Clawdstrike EDR para la era del enjambre. Cerrar en fallo. Firma la verdad. Estado: beta pre-1.0. Las API públicas son estables; los valores predeterminados pueden endurecerse antes de 1.0. Clawdstrike es un motor de políticas, un EDR y una cadena de auditoría firmada en un solo binario. Un...

thelightscope

LightScope Vea a sus escáneres LightScope es un monitor de seguridad de red ligero y de código abierto que convierte los puertos cerrados en honeypots. Vea quién escanea sus sistemas sin necesidad de infraestructura dedicada. Proporcionado por USC Information Sciences Institute. Qué hace Monitore...

xray

Welcome to xray 👋 一款功能强大的安全评估工具 🏠使用文档 • ⬇️xray下载 • ⬇️xpoc下载 • ⬇️xapp下载 • 📖插件存储库 English Version 注意：xray系列不开源，直接下载构建的二进制文件即可，仓库内主要为社区贡献的 poc，每次 xray 发布将自动打包。 ✨ xray2.0 为了解决 xray 1.0在功能增加过程中变得复杂且臃肿的问题，我们推出了 xray 2.0。 这一全新版本致力于提升功能使用的流畅度，降低使用门槛，并帮助更多安全行业从业者以更高效的模式收获更好的体验。xray 2.0...

redthread

RedThread Encuentra el exploit. Júzgalo. Redacta el arreglo. Demuestra qué cambió. RedThread es un framework centrado en la CLI para probar sistemas LLM, validar fallos y convertir vulnerabilidades confirmadas en candidatos de defensa respaldados por evidencia. Está diseñado para equipos que...

InterceptSuite

InterceptSuite !IMPORTANT Este repositorio ha sido archivado. El código base activo de InterceptSuite ahora es de código cerrado y solo de pago. Consulta los detalles a continuación. Acerca de InterceptSuite fue creado para resolver un problema de larga data en las pruebas de seguridad: intercept...

scopeblind-gateway

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

unicorn

Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...

uniFuzzer

uniFuzzer uniFuzzer 是一款基于 Unicorn 和 LibFuzzer 对闭源二进制程序进行模糊测试的工具。目前支持对 ARM/MIPS 架构的 32 位 LSB ELF 文件进行模糊测试，这类文件常见于物联网设备中。 中文介绍 特性 只需很少的 hack 且易于构建 可以针对任意指定的函数或代码片段 基于覆盖率引导的模糊测试，速度可观 自动解析并加载依赖项 通过 PRELOAD 覆盖库函数 构建 1. 逆向目标二进制文件，找到适合模糊测试的函数。 2. 在 callback 目录下创建一个 .c 文件，其中应包含以下回调函数： void onLibLoadconst...

SUSE-SU-2026:4182-1 Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by streamstate from the connection stream table bsc1279629...

syswarden

...

CVE-2026-72898

Aviso sobre el comportamiento de Toucan2 y map sin :closed true...

scopeblind-gateway v0.13.1

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy the same language AWS uses for IAM, blocks what breaks the rules before it runs, and signs an...

DcRat

DcRat Because I've heard more and more abuses of DcRat.I decided that i won't update this any more.The dev version will be also closed later. 由于听说了越来越多的对DcRat的滥用，所以我决定不再更新这个项目，在开发中的新版本稍后也会关闭。 New Version Preview: https://www.bilibili.com/video/BV1kD4y1F7uY Won't Open Source. Also Won't sell...

EUVD-2026-75905

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2026-88914

A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...

CVE-2026-87877

A flaw was found in zstd-jni. An attacker could exploit a use-after-free vulnerability by calling specific methods on closed streams without proper validation. This could lead to memory corruption, potentially allowing the attacker to corrupt unrelated objects or cause the Java Virtual Machine JV...

CVE-2026-87877

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM...

UBUNTU-CVE-2026-87877

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM...

CVE-2026-87877

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM...