panopticon

अप्रचलित पैनोप्टीकॉन परियोजनाGitlab पर स्थानांतरित हो गई है और इसे कई क्रेट्स में पुनर्गठित किया गया है। Qt GUI को Verso से बदल दिया गया है। मैं PRs को मर्ज करूंगा लेकिन इस संस्करण पर कोई महत्वपूर्ण कार्य नहीं करूंगा। नीचे दिए गए अधिकांश लिंक मृत हैं। पैनोप्टीकॉन - एक लिब्रे क्रॉस प्लेटफॉर्म...

Dna

Dna Dna एक स्थिर बाइनरी विश्लेषण ढांचा है जो LLVM के ऊपर निर्मित है। उल्लेखनीय रूप से यह लगभग पूरी तरह से C में लिखा गया है, जिसमें LLVM, Remill और Souper के लिए प्रबंधित बाइंडिंग शामिल हैं। कार्यक्षमता Dna SATURN पेपर से प्रेरित एक पुनरावृत्त नियंत्रण प्रवाह ग्राफ पुनर्निर्माण लागू करता है। यह...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

cfgrip

cfgrip PE/ELF x86/x64 CFG निकालने वाला उपकरण। एक बाइनरी इनपुट लेता है, उसे डिसअसेंबल करता है, हर जंप और कॉल GOT, जंप टेबल, रजिस्टर ट्रेसिंग को रिज़ॉल्व करता है, और पूरे कंट्रोल फ्लो ग्राफ को संरचित JSON के रूप में निर्यात करता है। क्यों आपको यह जानना होगा कि हर शाखा वास्तव में कहाँ जाती है। पढ़ने...

REpsych

REpsych : الحرب النفسية في الهندسة العكسية github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax نظرة عامة مجموعة أدوات REpsych هي إثبات مفهوم يوضح توليد الصور عبر مخطط تدفق التحكم CFG للبرنامج. CFG لدالة نموذجية| CFG مولّد بواسطة REpsych ---|--- | لا يوجد هدف محدد للمشروع بخلاف إظهار أنه يمك...

REpsych

REpsych : الحرب النفسية في الهندسة العكسية github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax نظرة عامة أداة REpsych هي إثبات مفهوم توضح توليد صور من خلال مخطط تدفق التحكم CFG الخاص بالبرنامج. مخطط CFG لدالة نموذجية| مخطط CFG مولّد بواسطة REpsych ---|--- | لا يوجد هدف محدد للمشروع بخلاف...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Handling jset if a & b ... as a jump in CFG computation. BPFJSET is a conditional jump, and currently, verifier.c:canjump does not take this into account. This can lead to incorrect live registers and incorrect SCC Set of...

NFTDELTA: Detecting Permission Control Vulnerabilities in NFT Contracts through Multi-View Learning

Permission control vulnerabilities in Non-fungible token NFT contracts can result in significant financial losses, as attackers may exploit these weaknesses to gain unauthorized access or circumvent critical permission checks. In this paper, we propose NFTDELTA, a framework that leverages static...

The Code Whisperer: LLM and Graph-Based AI for Smell and Vulnerability Resolution

Code smells and software vulnerabilities both increase maintenance cost, yet they are often handled by separate tools that miss structural context and produce noisy warnings. This paper presents The Code Whisperer, a hybrid framework that combines graph-based program analysis with large language...

Aether Smart Contract Security Analysis Framework 6.0

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainnet forks. It combines Solidity AST parsing, taint analysis, control flow graph analysis, cross-contract...

Aether Smart Contract Security Analysis Framework 5.0.2

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainnet forks. It combines Solidity AST parsing, taint analysis, control flow graph analysis, cross-contract...

SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis

Python is one of the most popular programming languages; as such, projects written in Python involve an increasing number of diverse security vulnerabilities. However, existing state-of-the-art analysis tools for Python only support a few vulnerability types. Hence, there is a need to detect a...

EUVD-2021-0439

Malware in sbrugna...

EUVD-2025-27932

Malicious code in bioql PyPI...

CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

UBUNTU-CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

CVE-2025-38607

CVE-2025-38607 refers to a Linux kernel issue in the BPF verifier where BPF_JSET (conditional jump) was not handled correctly in CFG/live register/SCC computation. The described flaw could cause incorrect live-register tracking and SCC analysis due to can_jump() not accounting for jset, potential...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the bpf module not treating jset as a jump in CFG calculations...

PT-2025-33805 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...