malwoverview

Malwoverview !Alt...

mal_unpack

malunpack Desempaquetador dinámico basado en PE-sieve 📖 Leer más . Ejecuta un malware empaquetado, espera a que desempaquete la carga útil, la vuelca y elimina el proceso original. !CAUTION Este desempaquetador ejecuta el malware original. Úsalo solo en una máquina virtual. ⚙ Uso Uso básico:...

unicorn_pe

Unicorn PE Unicorn PE es un proyecto/framework de instrumentación basado en unicorn diseñado para emular la ejecución de código de archivos PE de Windows, especialmente aquellos empaquetados. Este proyecto está archivado y ya no recibe mantenimiento. Se recomienda sogen como sucesor...

yara-ttd

yara-ttd - La némesis definitiva de los empaquetadores Usa reglas YARA en trazas de Time Travel Debugging 1. Demo 2. Motivaciones 3. Instalación 4. Uso 5. Próximas funciones Demo Un binario empaquetado con UPX Un binario simple que lanza calc.exe, empaquetado con UPX. yara-ttd encuentra la cadena...

DEBIAN-CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

AZL-104181 CVE-2026-97997 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

UBUNTU-CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997 virtio_ring: fix stale descriptor flags after a failed packed add

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

The Linux kernel contains a vulnerability in the virtio_ring component where a failed packed add can leave stale AVAIL and USED bits in the descriptors. When vring_map_one_sg() fails mid-operation, unmap_release restores flags but leaves descriptors marked as available. This causes the device to ...

EUVD-2026-86651

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

CVE-2026-97997

In the Linux kernel, the following vulnerability has been resolved: virtioring: fix stale descriptor flags after a failed packed add In a packed ring the AVAIL and USED bits sit in the descriptor itself, so writing them makes that descriptor available. Those bit combinations flip meaning on every...

JLSEC-2026-1118

A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikonloadpaddedpackedraw of the file src/decoders/decoderslibraw.cpp of the component TIFF/NEF. Executing a manipulation of the argument loadflags/rawwidth can lead to out-of-bounds read. It is possible to launch the...

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE , a new compiled Go ransomware designed to encrypt model weights, vector...

CVE-2026-64127

CVE-2026-64127 affects the Linux kernel Bluetooth L2CAP handling. The root cause, after a patch, was an incorrect use of DEFINE_RAW_FLEX() in l2cap_ecred_reconfigure(): the on-stack PDU size and source pointer were not adjusted, causing 8-byte data being copied from the stack instead of the inten...

CVE-2026-49988

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attachpackedoutput and readrepomixoutput flow can register and read arbitrary local .json, .txt, .md, or .xml files without the filesystemreadfile runSecretLint safety check or Repomix...

CVE-2026-49988 Repomix: attach_packed_output can bypass file-read secret scanning for supported local files

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attachpackedoutput and readrepomixoutput flow can register and read arbitrary local .json, .txt, .md, or .xml files without the filesystemreadfile runSecretLint safety check or Repomix...

CVE-2026-49988 Repomix: attach_packed_output can bypass file-read secret scanning for supported local files

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attachpackedoutput and readrepomixoutput flow can register and read arbitrary local .json, .txt, .md, or .xml files without the filesystemreadfile runSecretLint safety check or Repomix...

CVE-2026-49988: Exposure of Sensitive Information to an Unauthorized Actor

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, the Repomix MCP server attachpackedoutput and readrepomixoutput flow can register and read arbitrary local .json, .txt, .md, or .xml files without the filesystemreadfile runSecretLint safety check or Repomix...