Malicious code in function-flag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41710fdfae55850258c24f8be4df71e28d46d964cec0faa6def842369592ed2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

page-cache-corruption-lpes

Page Cache Corruption LPEs 3 Linux kernel local privilege escalation exploits. Same bug class as Dirty COW and Dirty Pipe. Root shell in seconds. Every major distro affected. All three corrupt the kernel's page cache — the in-memory copy of files that processes actually read and execute. The...

CVE-2018-16509

CVE-2018-16509 Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities Run $ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509...

RLSA-2026:76737 Important: rust-sequoia-sq security, bug fix, and enhancement update

Command-line frontends for Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Unbundle capnproto from sequoia-sq rhel-10.2.z JIRA:Rocky Linux-177547 For more details about the security...

rust-sequoia-sq security, bug fix, and enhancement update

An update is available for rust-sequoia-sq. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Command-line frontends for Sequoia. Security Fixes: sequoia-openpgp:...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

CVE-2022-0847-Dirty-Pipe-

CVE-2022-0847-Dirty-Pipe- this is a repo who is facing a escalation issue in their linux system and a news regarding problem of "Dirty pipeline" Max Kellermann, a developer at CM4all a German web hosting company, found it in early 2022 but not by checking for vulnerability. He was debugging when ...

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

rust-rpm-sequoia security, bug fix, and enhancement update

An update is available for rust-rpm-sequoia. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list An implementation of the RPM PGP interface using Sequoia. Security...

RLSA-2026:76734 Important: rust-rpm-sequoia security, bug fix, and enhancement update

An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 Bug Fixes and Enhancements: Uninformative error message on --import failure rhel-10.2.z JIRA:Rocky Linux-176906 Retu...

RLSA-2026:76735 Important: rust-sequoia-sqv security update

A simple OpenPGP signature verification program. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related informatio...

rust-sequoia-sqv security update

An update is available for rust-sequoia-sqv. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A simple OpenPGP signature verification program. Security Fixes:...

CVE-2024-24787-PoC

CVE-2024-24787-PoC On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -ltolibrary flag in a "cgo LDFLAGS" directive. This is not my bug, I just made a PoC for it. Reference...

Important: Red Hat Security Advisory: rust-sequoia-sq security, bug fix, and enhancement update

An update for rust-sequoia-sq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...

CVE-2022-0847-eBPF

CVE-2022-0847-eBPF An eBPF program to detect and defense attacks on CVE-2022-0847. In the kernel space, the program detects splice system calls, if such a system call contains a pipe as the output fd, and the flags of the pipe buffer is set to PIPEBUFFLAGCANMERGE , then an event would be submitte...

CVE-2023-22515

CVE-2023-22515: Confluence Data Center & Server Privilege Escalation Vulnerability Analysis Report 1. Overview CVE-2023-22515 is a critical Broken Access Control vulnerability discovered in Atlassian Confluence Data Center and Server products. An unauthenticated attacker can remotely reactivate...

Exfiltrated-Machine-Walkthrough---Subrion-CMS-CVE-2021-2220-

Exfiltrated Machine Walkthrough - Subrion CMS-CVE-2021-2220- See Exfiltrated.pdf Lab: https://portal.offsec.com/machine/exfiltrated-17398/overview/details Lab Name: Exfiltrated Flags: 2...

CVE-2021-4034-Capture-the-flag

CVE-2021-4034-Capture-the-flag Video Demonstration of Capture the Flag: https://www.youtube.com/watch?v=1N3x23X4FMk&t=103s...

RLSA-2026:76733 Important: rust-rpm-sequoia security update

An implementation of the RPM PGP interface using Sequoia. Security Fixes: sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion CVE-2026-42784 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...