176 matches found
yaraQA
yaraQA YARAルールの品質とパフォーマンスを向上させるアナライザー なぜ？ YARAルールは構文的に正しいにもかかわらず、機能しない場合があります。yaraQAは、YARAルールセットの作成者やメンテナーに対して、これらの問題を見つけて報告します。 yaraQAが検出しようとする問題は、例えば以下の通りです： 構文的には正しいが、条件の誤りにより決してマッチしないルール（例：1つの文字列を持つルールで条件に 2 of them とある場合） おそらく間違っている文字列と修飾子の組み合わせを使用するルール（例：$ = "\Debug\" fullword）...
brace-expansion 资源管理错误漏洞
Brace-expansion is a JavaScript extension developed by Julian Gruber. Versions of Brace-expansion 5.0.0 to 5.0.6 had a resource management vulnerability. This vulnerability stemmed from the max option being applied too late. When expanding a large range of values, the sequence generation loop...
Fedora 44 : unbound (2026-49f37e16aa)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-49f37e16aa advisory. Update to 1.25.1 rhbz2480119 - Fix CVE-2026-33278, Possible remote code execution during DNSSEC validation. Thanks to Qifan Zhang, Palo Alto Network...
Continuous Discovery of Vulnerabilities in LLM Serving Systems with Fuzzing
LLM inference and serving systems have become security-critical infrastructure; however, many of their most concerning failures arise from the serving layer rather than from model behavior alone. Modern inference engines combine KV cache, batching, prefix sharing, speculative decoding, adapters,...
Suricata 安全漏洞
Suricata is a network IDS, IPS, and NSM engine developed by the Open Information Security Foundation. Versions of Suricata prior to 8.0.0 and 8.0.4 contained security vulnerabilities. These vulnerabilities stemmed from a quadratic complexity issue during the search for URLs in MIME-encoded SMTP...
CVE-2023-54030 io_uring/net: don't overflow multishot recv
In the Linux kernel, the following vulnerability has been resolved: iouring/net: don't overflow multishot recv Don't allow overflowing multishot recv CQEs, it might get out of hand, hurt performance, and in the worst case scenario OOM the task...
Low: python3.11
Issue Overview: If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables. CVE-2025-6075 Affected Packages: python3.11 Issue Correction: Run dnf update python3.11 --releasever 2023.9.20251208 or dnf update --advisory...
BIT-PYTHON-MIN-2025-6075 Quadratic complexity in os.path.expandvars() with user-controlled template
If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...
Stellar Toolkit for Outlook Review: Simplify and Optimize PST/OST File Management
Are you experiencing performance issues with your Outlook data PST and OST in the Outlook environment? Common problems…...
SUSE-SU-2025:02970-2 Security update for pam
This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234...
EUVD-2011-3505
Malware in sbrugna...
EUVD-2024-42303
Malicious code in bioql PyPI...
EUVD-2022-0488
Malicious code in bioql PyPI...
EUVD-2023-2963
Malicious code in bioql PyPI...
EUVD-2024-47482
Malicious code in bioql PyPI...
EUVD-2022-43159
Malicious code in bioql PyPI...
EUVD-2023-32305
Malicious code in bioql PyPI...
EUVD-2024-17464
Malicious code in bioql PyPI...