CVE-2024-4947

CVE-2024-4947 야생in-the-wild에서 발견된 V8 타입 혼동type confusion 버그. 이 저장소는 다음을 포함합니다. CVE-2024-12695, Object Hash Reassign과 동일한 익스플로잇 패턴으로 이 취약점을 승격시키기 위한 분석 및 PoC 타입 혼동을 이용해 객체 해시를 JSArray의 length 필드에 할당하여 구성한 AddressOf / FakeObject 프리미티브와 그 분석 분석: Analysis.md 재현 정보 OS: Ubuntu 24.04 Git 커밋: 12.4.254.16...

UBUNTU-CVE-2026-44309

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Prior to 0.16.0, gitsign verify and gitsign verify-tag re-encode commit/tag objects through go-git's EncodeWithoutSignature before checking the signature, instead of verifying against the raw git...

CVE-2026-44309

Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity. Prior to 0.16.0, gitsign verify and gitsign verify-tag re-encode commit/tag objects through go-git's EncodeWithoutSignature before checking the signature, instead of verifying against the raw git...

PT-2026-39243

Name of the Vulnerable Software and Affected Versions Gitsign versions prior to 0.16.0 Description gitsign verify and gitsign verify-tag re-encode commit or tag objects using the EncodeWithoutSignature function from the go-git library before checking the signature, rather than verifying the raw g...

Exploit for Type Confusion in Google Chrome

CVE-2024-4947 A in-the-wild V8 type confusion bug. This repo...

Denial Of Service (DoS)

spray-json is vulnerable to denial of service. An attacker is able to create an object with colliding keys to cause high resource consumption when HashMap creates a map, resulting in a denial of service condition when parsing multiple JSON object fields with the same hash code...