Johnny-You-Are-Fired

Johnny-You-Are-Fired USENIX 论文的配套材料 | 完整论文 此处 摘要 OpenPGP 和 S/MIME 是加密和数字签名电子邮件的两大标准。数字签名本应保证消息的真实性和完整性。在这项工作中，我们展示了针对各种 OpenPGP 和 S/MIME 电子邮件签名验证实现的五类实际可行的伪造攻击：1 我们分析了 S/MIME 容器格式中的边界情况。2 我们利用了最广泛使用的 OpenPGP 实现 GnuPG API 中的带内信令。3 我们应用 MIME 包装攻击，滥用电子邮件客户端对部分签名消息的处理。4 我们分析了签名消息与发送者身份绑定中的弱点。5...

oneiromancer

oneiromancer "软件开发中的大量缺陷源于程序员未能完全理解其代码 可能执行到的所有状态。" -- John Carmack "它能运行《毁灭战士》吗？" -- https://canitrundoom.org/ Oneiromancer 是一款逆向工程辅助工具，它使用本地运行的、针对 Hex-Rays 伪代码微调过的 LLM 来辅助代码分析。它可以分析一个函数或较小的代码片段，并根据分析结果返回代码功能的高级描述、建议的函数名以及变量重命名建议。 功能特性 跨平台支持微调 LLM aidapal， 该模型基于 mistral-7b-instruct。 易于与伪代码提取器...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

bug-bounty-standards

这个仓库是什么？ 这个仓库列出了漏洞赏金项目中会出现的情景以及应当如何处理这些情景。目前，其中许多情景都是逐案处理的，这给黑客、项目所有者和平台带来了大量的不确定性和困扰。本仓库的目标是统一所有赏金平台和项目处理这些边界情况的方式。希望标准化能让各方更频繁地满足彼此的期望。 这是一份草案 本文档是一份草案，尚未被任何漏洞赏金平台实施。在此阶段，我请求所有相关方提出意见。 如何贡献 请通过提交 GitHub issue 来贡献。所有合理的已提交 issue 将至少保持开放 30 天以供评论。 你的 issue 应当陈述一种观点，例如：...

AZL-98487 CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

FreeType Experimental TrueType Glyph Construction

This Python code outlines an experimental framework for constructing synthetic TrueType font structures intended for studying parser behavior, glyph-processing logic, and edge-case handling within font-rendering pipelines...

justhtml has sanitization bypass in custom policies and programmatic DOM

Summary justhtml 1.17.0 fixes multiple security issues in sanitization, serialization, and programmatic DOM handling. Most of these issues affected advanced or custom configurations rather than the default safe path. Affected versions - justhtml , MathML , SVG / , and MathML text integration poin...

Why Most AI Deployments Stall After the Demo

The fastest way to fall in love with an AI tool is to watch the demo. Everything moves quickly. Prompts land cleanly. The system produces impressive outputs in seconds. It feels like the beginning of a new era for your team. But most AI initiatives don't fail because of bad technology. They stall...

justhtml includes multiple security fixes

Summary justhtml 1.15.0 includes multiple security fixes affecting URL sanitization helpers, HTML serialization, Markdown passthrough, and several custom sanitization-policy edge cases. These issues have different impact levels and do not all affect the default configuration in the same way...

Improper Authentication

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authentication in processOCSPRequest, which is part of the the CLIENTCERT authentication process. In some "edge cases", an attacker can trigger a...

EUVD-2024-36107

Malicious code in bioql PyPI...

EUVD-2024-36998

Malicious code in bioql PyPI...

CVE-2025-38658

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: Do not complete commands twice if nvmetreqinit fails Have nvmetreqinit and req-execute complete failed commands. Description of the problem: nvmetreqinit calls nvmetreqcomplete internally upon failure, e.g.,...

CVE-2024-37372

A flaw was found in Node.js. The Permission Model assumes that any UNC path starting with two backslashes \\ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...

CVE-2024-37372

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...

ALPINE-CVE-2024-37372

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...

CVE-2024-37372

The CVE-2024-37372 entry concerns Node.js and the experimental permission model. The root cause is a faulty assumption in UNC path handling: the model treats paths starting with two backslashes as having a four-character prefix that can be ignored, which is not universally true. This leads to vul...

CVE-2024-37372

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...

CVE-2024-37372

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...

CVE-2024-37372

The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases...