Decompyle++ 缓冲区错误漏洞

Decompyle++ is a Python bytecode disassembly/decompilation program by the individual developer Michael Hansen. It is designed to convert compiled Python byte code back into valid, human-readable Python source code. A security vulnerability exists in Decompyle++ pycdc, which stems from the presenc...

Ming buffer overflow vulnerability (CNVD-2022-20527)

Ming is a Flash SWF output library written in C language. A security vulnerability exists in the decompiler.c file in Ming version 0.4.8, which can be exploited by attackers to cause a direct segmentation error and a denial of service...

CVE-2021-34338

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

UBUNTU-CVE-2021-34339

Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

UBUNTU-CVE-2021-34338

Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

CVE-2021-34339

Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString in decompiler.c file that causes a direct segmentation fault and leads to denial of service...

Pcf2bdf 资源管理错误漏洞

Pcf2bdf is a font decompiler by the Japanese individual developer Nayuta Taga. It is used to convert X fonts from a portable compiled format to a bitmap distribution format. pcf2bdf suffers from a resource management error vulnerability that allows an attacker to trigger a program crash via a...

pcf2bdf 安全漏洞

Pcf2bdf is a font decompiler by the Japanese individual developer Nayuta Taga. It is used to convert X fonts from a portable compiled format to a bitmap distribution format. A buffer error vulnerability exists in pcf2bdf, which allows an attacker to trigger an unsafe memory access via a specially...

Skylot Jadx 代码问题漏洞

Skylot Jadx is a Dex to Java decompiler. A code issue vulnerability exists in Skylot Jadx that stems from the product's improper restriction on XML external entity references. The following products and versions are affected: Skylot Jadx versions prior to 1.3.2...

Path Traversal in konloch/bytecode-viewer

Description the.bytecode.club:Bytecode-Viewer is a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". The vulnerability is exploited using a specially crafted...

ctf

It is an offensive tool for reverse engineering. The repository contains a binary decompiler for a "Magic Word" challenge, which appears to be a reverse engineering exercise. The code is written in C++ and utilizes the basicstring class from the C++ Standard Library. The decompiled main function ...

Talos tools of the trade

By Andrea Marcelli and Holger Unterbrink. If you're looking for something to keep you busy while we're all stuck inside during the holidays, Cisco Talos has a few tools for you you can play with in the coming days and weeks. We recently updated GhIDA to work with the latest version of IDA and we...

GDA Android Reversing Tool - A New Decompiler Written Entirely In C++, So It Does Not Rely On The Java Platform, Which Is Succinct, Portable And Fast, And Supports APK, DEX, ODEX, Oat

Here, a new Dalvik bytecode decompiler, GDA（this project started in 2013 and released its first version 1.0 in 2015 at www.gda.com: 9090 , is proposed and implemented in C++ to provide more sophisticated, fast and convenient decompilation support. GDA is completely self-independent and very stabl...

How we developed our simple Harbour decompiler

https://github.com/KasperskyLab/hbdec Every once in a while we get a request that leaves us scratching our heads. With these types of requests, existing tools are usually not enough and we have to create our own custom tooling to solve the "problem". One such request dropped onto our desk at the...

FIDL: FLARE’s IDA Decompiler Library

IDA Pro and the Hex Rays decompiler are a core part of any toolkit for reverse engineering and vulnerability research. In a previous blog post we discussed how the Hex-Rays API can be used to solve small, well-defined problems commonly seen as part of malware analysis. Having access to a...

Dangbei Marketplace An Android version of the APP has a logic flaw vulnerability

Founded in August 2013, Hangzhou Dangbei Network Technology Co., Ltd. is currently one of the well-known value-added service providers of intelligent big screen in China. There is a logic flaw vulnerability in the Android version of Dangbei Market An APP, which allows an attacker to tamper with t...

GhIDA: Ghidra decompiler for IDA Pro

By Andrea Marcelli Executive Summary Cisco Talos is releasing two new tools for IDA Pro: GhIDA and Ghidraaas. GhIDA is an IDA Pro plugin that integrates the Ghidra decompiler in the IDA workflow, giving users the ability to rename and highlight symbols and improved navigation and comments. GhIDA...

CVE-2019-13623

In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java from the package ghidra.app.plugin.core.archive via an archive with an executable file that has an initial ../ in its filename. This allows attackers to overwrite arbitrary files in scenarios where an intermediate analysis...

HexRaysCodeXplorer - Hex-Rays Decompiler Plugin For Better Code Navigation

The Hex-Rays Decompiler plugin for better code navigation in RE process. CodeXplorer automates code REconstruction of C++ applications or modern malware like Stuxnet, Flame, Equation, Animal Farm ... The CodeXplorer plugin is one of the first publicly available Hex-Rays Decompiler plugins. We kee...

dnSpy - .NET Debugger And Assembly Editor

dnSpy is a debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available. Want to say thanks? Click the star at the top of the page. Or fork dnSpy and send a PR! The following pictures show dnSpy in action. It shows dnSpy editing a...