Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/07 11:44 a.m.•21 views

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

6.3AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/03 2:56 p.m.•15 views

iocx v0.7.6.1

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

6.3AI score
SaveExploits0References3
OSV
OSV
•added 2026/09/01 7:23 p.m.•11 views

GHSA-XWG4-73V4-XW9W nanoid: Integer Overflow or Wraparound

Summary An integer overflow in nanoidsize permanently corrupts the process-wide CSPRNG pool, causing all subsequent ID generation to return the deterministic string "uuuuuuuuuuuuuuuuuuuuu". Any application that passes user-influenced values to the size parameter loses all randomness guarantees fo...

7.4CVSS6.2AI score0.00296EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/09/01 7:23 p.m.•18 views

nanoid: Integer Overflow or Wraparound

Summary An integer overflow in nanoidsize permanently corrupts the process-wide CSPRNG pool, causing all subsequent ID generation to return the deterministic string "uuuuuuuuuuuuuuuuuuuuu". Any application that passes user-influenced values to the size parameter loses all randomness guarantees fo...

7.4CVSS6.2AI score0.00296EPSS
SaveExploits0References8Affected Software1
Packet Storm News
Packet Storm News
•added 2026/04/27 12:00 a.m.•17 views

SNF - Shadow Network Fingerprinting Engine

SNF Shadow Network Fingerprinting Engine is a 100% offline, air-gap-native passive network intelligence engine written entirely in Rust. It was designed from the ground up for environments where outbound connectivity is not just unavailable but prohibited: classified defense networks, nuclear...

5.3AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2026/03/23 6:30 a.m.•29 views

jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction logic in ext/jsbn.js. An attacker can force RSA public-key operations e.g., verify and encryption to collapse to...

5.9CVSS5.9AI score0.0011EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder