llvm-jutsu

llvm-jutsu: 反LLM難読化 これは32ビット整数です 問題 2025年です。あなたは完璧なライセンスチェックを作成するのに数週間を費やしました。不透明述語、制御フロー平坦化、MBA式、ありとあらゆるトリックを使いました。デプロイします。数時間後、誰かがバイナリをClaudeに貼り付け、「ライセンスキーは何ですか？」と尋ね、モデルが……教えてくれます。 機械が勝利しました。そうでしょうか？ 九字印の古の技 何世紀にもわたり、忍者は印を結んでチャクラを流し、術を放ってきました。巻物に書かれていないのは、これらの手の形が機械から秘密を守る力を持っているということです。...

replica

REPLICA 용을 길들여라 ✨기능 ⚡ 누락된 명령어 역어셈블 - Ghidra의 자동 분석이 놓친 코드 정의 ⚡ 누락된 함수 탐지 및 수정 - Ghidra의 자동 분석이 놓친 함수 정의 ⚡ 'undefinedN' 데이터 타입 수정 - 'undefinedN' 데이터 타입을 수정하여 디스어셈블리 및 디컴파일 개선 ⚡ MSDN API 정보를 주석으로 설정 - 함수, 인수 및 반환값에 대한 정보를 주석 형태로 Ghidra 디스어셈블리 목록에 통합 ⚡ API 호출 기반 함수 태깅 - 하나 이상의 API를 호출하는 함수를 API 이름 및...

px-vm

PerimeterX Auditor VM 解析 概要 このリポジトリは、PerimeterX の auditor.js のリバースエンジニアリングを文書化したものです。auditor.js は、PX のボット検出パイプラインにおいて二次的なフィンガープリンティング層として使用されるバイトコード仮想マシンです。この分析では以下をカバーしています。 バイトコードの抽出と5層の復号パイプライン オペコードテーブルの再構築（基本107種 + ハニー40種 + パディング24種 + スーパーインストラクショングループ16種） 定数プールの復号（1230エントリ、1095個の暗号化文字列）...

jadx-magic-strings

JADX Magic Strings Plugin 文字列定数から情報を抽出するJADXプラグインです。 機能 このプラグインは、逆コンパイルされたコードから文字列定数を抽出・解析して、以下を特定します： 1. ソースファイル参照 ：文字列定数内のJava/Kotlinソースファイル（.java、.kt、.kts、.scala、.groovy）への参照を検出します 2. メソッド名の候補 ：正規表現パターンを使用して、文字列から潜在的なメソッド名を特定します 3. 文字列解析 ：関連するメソッドとクラスとともに、すべての文字列定数を収集します インストール...

postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-48206

A flaw was found in the Apache Camel JIRA component. Due to improper input validation, non-Camel-prefixed Exchange header constants can bypass the HTTP header filter. This allows a remote attacker, potentially unauthenticated, to supply specific headers and override intended values. Consequently,...

CVE-2026-16693

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693 IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

EUVD-2026-71486

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693 IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by a cryptographic weakness in Digital Certificate Manager (DCM) (5770-SS1 Option 34). The vulnerability stems from hardcoded cryptographic constants used to obfuscate encryption keys, classified as CWE-327 (Use of a Broken or Risky Cryptographic...

CVE-2026-16693: Use of a Broken or Risky Cryptographic Algorithm

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

PT-2026-85749

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

Security Bulletin: IBM i is Affected By Cryptographic Algorithm Weakness in DCM [CVE-2026-16693]

Summary IBM i is vulnerable to allowing an authenticated attacker to obtain sensitive information CVE-2026-16693 in Digital Certificate Manager DCM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16693 DESCRIPTION: IBM i could allow a remote authenticated...

NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

CVE-2026-14676

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

BIT-POSTGRESQL-2026-14676 PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

SUSE CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

ALPINE-CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...