WebSafeCompiler

WebSafeCompiler WSC WebSafeCompiler WSC 是一款高级实用工具（网站编译器），旨在使用 Node.js 对 Web 应用程序和网站进行优化、压缩和混淆（如果需要）。它通过减小文件大小或提供针对逆向工程的持久保护来增强您的 Web 资产，确保您的代码可随时部署且安全可靠。 !NOTE 适用于 .github.io 网站 🚀 简介 要充分发挥 WebSafeCompiler 的全部潜力，请在终端中执行以下命令： node wsc.js --map --smart --drm 参数与选项： ：包含待处理源文件的目录。 ：优化和混淆后文件的输出目录。 -m,...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

gmh5225

我正在开发 NeverC 和 NeverD —— 两个基于 LLVM 的安全研究工具。NeverC 是一个 C23 编译器；NeverD 是一个二进制分析与反编译引擎。入口编译，出口提升与反编译。两者仍在开发中。 NeverC 一个面向安全研究、对 AI 友好的 C23 编译器，基于 LLVM 构建。 它可将标准 C 编译为宿主二进制、独立可执行文件以及位置无关的 DynCode。编译器、链接器和运行时以单一二进制形式发布，因此你可以在单一宿主上交叉编译 Windows PE、Linux ELF、macOS Mach-O、Android 和 iOS。内置...

CVE-2025-32463

CVE-2025-32463 🚨 使用sudo chroot 提权至 root。无需安装 gcc。 🚀 什么是 CVE-2025-32463？ CVE-2025-32463 是一个 Linux 漏洞，允许本地攻击者通过滥用 sudo chroot 命令将权限提升至 root。与其他类似漏洞利用不同，该技术不需要 gcc 或编译代码，使攻击者更容易利用。 Terminal GIF 🛠️ 漏洞利用步骤 1. 识别配置错误的 sudo chroot 权限。 2. 执行 chroot 环境逃逸技术。 3. 获得 root 权限！ 🧑‍💻 影响 Root 访问权限 ：完全控制系统。 无需编译...

CVE-2026-10702

CVE-2026-10702 JavaScript 引擎（JIT 组件）中的 JIT 错误编译问题。此漏洞已在 Firefox 151.0.3 中修复。 捐赠 通过 PayPal 或扫描下方二维码支持本项目的维护。 ⚡ 简单用法 请仅在安全且经过授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 经授权的渗透测试环境 示例设置： git clone cd 示例用法： Replace the commands above with your actual project setup steps. 注意： 从其他项目克隆时，你必须运行 curl -fsSL...

fuzzing

libfuzzer-workshop "现代 C/C++ 项目模糊测试"工作坊的材料。 该工作坊的第一个版本已在 ZeroNights'16 安全会议上展示。 免责声明 本工作坊最初于 2016 年开发。截至今天（2021 年及以后），工作坊的实践部分可能无法立即运行，因为 libFuzzer 多年来已发生巨大变化。工作坊的理论部分仍然是非常好的学习材料，但对于实践课程，建议遵循最新版本的 libFuzzer 教程。 要求 2-3 小时的时间 基于 Linux 的操作系统 C/C++ 经验（不需要特别高深，但需要能够阅读、编写和编译 C/C++ 代码） 最新版本的 clang...

CVE-2021-21220

CVE-2021-21220 漏洞利用 从错误的 JIT 行为到远程代码执行 概述 本演示文稿解释了 CVE-2021-21220 的利用过程，这是 Google Chrome 的 V8 JavaScript 引擎 中的一个漏洞，由 JIT 编译器在优化过程中的错误假设引起。 演示涵盖以下内容： V8 如何执行即时（JIT）编译 优化过程中如何出现有符号/无符号类型混淆错误 该错误如何导致越界（OOB）数组原语 攻击者如何利用 OOB 访问泄露地址并实现任意内存写入 WebAssembly（Wasm）如何成为本机代码执行的目标 现有的缓解措施和现代浏览器防御 演示目标 本演示的目标是展示...

CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...

Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...

AlmaLinux 9.6 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772451263)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772451263 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags ca...

Rocky Linux 8 [CIQ] Security Update: java-17-openjdk / java-17-openjdk-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_1825)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241825 advisory. OpenJDK: long Exception message leading to crash 8319851 CVE-2024-21011 OpenJDK: integer overflow in C1 compiler address generation 8322122 CVE-2024-21068...

Rocky Linux 9.6 [CIQ] Security Update: protobuf / protobuf-compiler / protobuf-compiler-debuginfo / etc (ciqsa-2026_1447)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261447 advisory. This advisory aggregates security fixes for the protobuf SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-0994. Tenable has extracted the preceding description...

AlmaLinux 9.2 [TuxCare] Security Update: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1766074947)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1766074947 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE component: Compiler. The supported version...

CVE-2026-103111

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1781081641)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781081641 advisory. - Arithmetic over induction variables in loops were not correctly checked for underflow or overflow. As a result, the compiler would allow fo...

CVE-2026-59283

A flaw was found in Spring Framework. Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. This could allow an attacker to circumvent security restrictions,...

EulerOS Virtualization 2.11.0 : python-jinja2 (EulerOS-SA-2026-3547)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

fil-c v0.685

Fil-C 0.686 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

Linux Distros Unpatched Vulnerability : CVE-2026-83357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle...

Linux Distros Unpatched Vulnerability : CVE-2026-83368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported...

Linux Distros Unpatched Vulnerability : CVE-2026-83408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle...