350 matches found
telfhash
Trend Micro ELF Hash telfhash telfhash est un hash de symboles pour les fichiers ELF, tout comme imphash est un hash d'importations pour les fichiers PE. Avec telfhash, vous pouvez regrouper les fichiers ELF par similarité basée sur les symboles. Ceci est particulièrement utile pour regrouper des...
CVE-2026-34486
CVE-2026-34486 Обход fail-open в EncryptInterceptor в кластеризации Apache Tomcat Tribes, приводящий к неаутентифицированному RCE через десериализацию Java. Затронуты: 11.0.19+, 10.1.53+, 9.0.116+. Исправлено в: 11.0.21, 10.1.54, 9.0.117. Обнаружено и сообщено Bartlomiej Dmitruk striga.ai. Статья...
Unlearnable-Clusters
Необучаемые кластеры: на пути к необучаемым примерам без меток Код, относящийся к статье "Необучаемые кластеры: на пути к необучаемым примерам без меток", CVPR2023. Предобработка Сначала запустите preprocess.py, чтобы переименовать каталог набора данных. python preprocess.py --config...
cosa-nostra
Cosa Nostra Cosa Nostra est un toolkit de clustering open source axé sur l'analyse de malwares. Il peut créer des arbres phylogénétiques d'échantillons de malwares binaires structurellement similaires. Il a été initialement présenté lors du SyScan360 Shanghai 2016. Je le maintiens depuis 2016 pou...
Firmware_Slap
Firmware Slap Firmware Slap combine l'analyse concolique avec le clustering de fonctions pour la découverte de vulnérabilités et la similarité de fonctions dans le firmware. Firmware Slap est construit comme une série de bibliothèques et exporte la plupart des informations sous forme de pickles o...
Clustering Local File Inclusion
Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access. id: CVE-2021-43496 inf...
permhash
Permhash — это расширяемая платформа для хеширования объявленных разрешений, применяемых к расширениям браузера на основе Chromium и APK-файлам, что позволяет выполнять кластеризацию, поиск угроз и пивотинг аналогично хешированию импортов и хешированию rich-заголовков. Permhash в настоящее время...
cve-2026-25854
CVE-2026-25854 — Периодический открытый редирект Обнаружил: gregk4sec https://github.com/gregk4sec/cve Дата обнаружения: 2026-01-30 Затронутый поставщик: Apache Затронутый продукт: Tomcat 11.0.x / 10.1.x / 9.x Серьёзность: 6.1 Medium CWE: CWE-601 URL Redirection to Untrusted Site 'Open Redirect'...
CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization
CVE-2026-34486 Обход механизма fail-open в EncryptInterceptor в кластеризации Apache Tomcat Tribes, приводящий к неаутентифицированному RCE через десериализацию Java. Затронутые версии: 11.0.19+, 10.1.53+, 9.0.116+. Исправлено в: 11.0.21, 10.1.54, 9.0.117. Обнаружено и сообщено Бартломеем Дмитрук...
Cooper-ndss-2022
Cooper: тестирование связующего кода скриптовых языков с помощью кооперативной мутации Cooper использует кооперативную мутацию для тестирования связующего кода скриптовых языков с целью поиска проблем безопасности памяти. Кооперативная мутация одновременно изменяет код скриптов и связанные объект...
HTTP-Basma
Empreinte adaptative : le sondage multi-étapes d'HTTP-Basma pour une différenciation granulaire des serveurs HTTP-Basma est disponible en ligne à l'adresse https://httpbasma.netomize.ca/ Introduction Dans le domaine de la cybersécurité, identifier et caractériser avec précision les serveurs web e...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include
A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...
Apache Tomcat: Apache Tomcat: Information disclosure via sensitive data in log files
A flaw was found in Apache Tomcat. The cloud membership for clustering component was vulnerable to the insertion of sensitive information into log files. This vulnerability could lead to the exposure of the Kubernetes bearer token, which is a credential used for authentication within a Kubernetes...