75988 matches found
fickling
Fickling Fickling 是一个用于 Python pickle 对象序列化的反编译器、静态分析器和字节码重写器。你可以使用 fickling 来检测、分析、逆向工程，甚至创建恶意的 pickle 或基于 pickle 的文件，包括 PyTorch 文件。 Fickling 既可以作为 Python 库 使用，也可以作为 CLI 使用。 安装 保护 AI/ML 环境 通用恶意文件检测 高级用法 跟踪 pickle 执行 Pickle 代码注入 Pickle 反编译 PyTorch 多格式文件（polyglots） 更多信息 联系方式 安装 Fickling 已在 Python...
fickling
Fickling Fickling is a decompiler, static analyzer, and bytecode rewriter for Python pickle object serializations. You can use fickling to detect, analyze, reverse engineer, or even create malicious pickle or pickle-based files, including PyTorch files. Fickling can be used both as a python libra...
PT-2026-102768
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap-buffer-overflow occurs when a TFTP server responds with a short ERROR packet. The client only verifies that the datagram is at least four bytes long, but...
Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2026-3131)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3131 advisory. Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by...
PT-2026-102926
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.11 Description The PyEnvCfg.write function writes prompt values verbatim to the line-oriented pyvenv.cfg format, while PyEnvCfg. read values parses the file using str.splitlines and accepts the last value for...
ROS-20260929-73-0118
The vulnerability of the ocfs2findvictimchain function in the fs/ocfs2/suballoc.c component of the OCFS2 file system support in Linux’s kernel involves the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to cause a service failure...
FreeBSD: VID-3f11e437-b7cd-11f1-a883-2cf05da270f3 (CVE-2026-4523): Gitlab -- vulnerabilities
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an unauthenticated user to read CI/CD job trace contents containing sensitive variable values due to improper...
Timing Side-Channel in SM2 Signature Generation
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...
CVE-2026-100799: Use of Uninitialized Variable
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Thunderbird 157 and Firefox 157...
PT-2026-102657
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description SM2 signature generation uses non-constant-time arithmetic on secret values, creating a timing side-channel. The process computes the signature value using...
PT-2026-102923
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.13 Description The generated activate bash and zsh and activate.fish scripts place values already escaped by shlex.quote inside an additional quoted context. In bash and zsh scripts, a crafted virtual...
PT-2026-102925
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.12 Description The BatchActivator.quote function fails to properly sanitize prompt text before it is inserted into a cmd.exe set statement within the activate.bat file. An attacker capable of influencing the...
CVE-2026-77696
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...
Fedora 43 : chromium (2026-8729b61cd3)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729b61cd3 advisory. Update to 154.0.8037.57 CVE-2026-95274: Improper output encoding in DevTools CVE-2026-95275: Incorrect reference resolution in MediaStream...
Important: rsync
Issue Overview: Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replacing parent directory components with symbolic links. Attackers with write access to ...
CVE-2026-100806: Use of Uninitialized Variable
Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...
UBUNTU-CVE-2026-77696
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...
PT-2026-102956
Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description An integer underflow in the IKE daemon iked allows a remote attacker to cause a denial of service. After completing the initial IKEv2 handshake, the attacker can crash the iked...
PT-2026-102706
Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.4 Description An unauthenticated stored Cross-Site Scripting XSS issue exists in the public form upload endpoint. While the endpoint validates file extensions and MIME types, it stores the original multipa...