malwoverview

Malwoverview !Alt...

yara-ttd

yara-ttd - The ultimate packer nemesis Use YARA rules on Time Travel Debugging traces 1. Demo 2. Motivations 3. Install 4. Usage 5. Upcoming features Demo A binary packed with UPX A simple binary that launches calc.exe, packed with UPX. yara-ttd finds the calc.exe string in the module memory,...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922 ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, unpack2bit and unpack4bit resize unpacked arrays according to attacker-controlled TensorProto.dims without verifying that rawdata or int32data encodes the declared number of elements...

CVE-2026-115922

The Open Neural Network Exchange (ONNX) library is vulnerable to a Denial of Service (DoS) via memory exhaustion in versions prior to 1.22.0 . The vulnerability exists because the _unpack_2bit() and _unpack_4bit() functions resize unpacked arrays based on attacker-controlled TensorProto.dims with...

Malicious code in net-codec-testmetest (npm)

Source: amazon-inspector 7bf1dbafca56ccfcb849f9ebb80b7a1cdf42007fd12618492620e0f7660476b2 The package has no native source files but ships a binding.gyp whose sole target is type:'none' and whose sources array uses GYP command expansion !env node index.js... to execute index.js during node-gyp...

Malicious code in net-codec-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf1dbafca56ccfcb849f9ebb80b7a1cdf42007fd12618492620e0f7660476b2 The package has no native source files but ships a binding.gyp whose sole target is type:'none' and whose sources array uses GYP command expansion !e...

CVE-2026-86566

A flaw exists in DPDK lib/vhost where a guest providing runt RX descriptors can trigger an integer underflow (CWE-191) in the copy length during vhost enqueue (supporting both split and packed rings). This vulnerability results in a denial of service for shared vhost backends, such as OVS-DPDK . ...

mal_unpack

malunpack Unpacker dinamico basato su PE-sieve 📖 Leggi altro . Distribuisce un malware packed, attende che questo esegua l'unpack del payload, esegue il dump del payload e termina il processo originale. !CAUTION Questo unpacker distribuisce il malware originale. Usalo solo su una macchina virtual...

unicorn_pe

Unicorn PE Unicorn PE è un progetto/framework di strumentazione basato su unicorn progettato per emulare l'esecuzione del codice per file PE Windows, in particolare quelli packed. Questo progetto è archiviato e non più mantenuto. sogen è consigliato come successore. Funzionalità Estrai l'immagine...

DEBIAN-CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

AZL-104181 CVE-2026-97997 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

UBUNTU-CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

The Linux kernel contains a vulnerability in the virtio_ring component where a failed packed add can leave stale AVAIL and USED bits in the descriptors. When vring_map_one_sg() fails mid-operation, unmap_release restores flags but leaves descriptors marked as available. This causes the device to ...

CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

EUVD-2026-86651

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997 virtio_ring: fix stale descriptor flags after a failed packed add

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

JLSEC-2026-1118

A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikonloadpaddedpackedraw of the file src/decoders/decoderslibraw.cpp of the component TIFF/NEF. Executing a manipulation of the argument loadflags/rawwidth can lead to out-of-bounds read. It is possible to launch the...