136 matches found
ghidra-copilot
Ghidra Copilot Ghidra용 AI 지원 컴패니언입니다. 현재 프로그램에 관한 질문에 답하고, 다음 단계를 제안하며, 대화에서 직접 작은 분석 도구를 실행할 수 있는 채팅 패널을 내장합니다. 기능 열려 있는 프로그램과 컨텍스트를 유지하는 Ghidra 내부 채팅. 심볼 검색, 데이터 추출, 리팩토링 도우미를 위한 도구 호출. Spring AI를 통해 OpenAI, Azure OpenAI, Anthropic, Ollama에서 작동합니다. 스크린샷 채팅 패널: 스크린샷 준비 중 도구 결과: 스크린샷 준비 중 요구 사항...
masm_shc
masmshc A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints. Demos Paper 📰 VXUG ; mirror...
violent-python3
Python 3 "Violent Python" 소스 코드 TJ O'Connor의 "Violent Python" 책의 소스 코드입니다. 이 코드는 Python 3로 완전히 변환되었고, PEP8 표준을 준수하도록 재포맷되었으며, 더 이상 사용되지 않는 라이브러리 구현과 관련된 의존성 문제를 제거하기 위해 리팩토링되었습니다. 이와 유사한 변환 작업을 제가 Justin Seitz의 "Black Hat Python" 책의 소스 코드에 대해 공개한 바 있습니다. 아직 확인하지 않았다면여기에서 확인해 보세요. 사용법 프로젝트를 위한 새...
kernel: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
A flaw was found in the Linux kernel's Server Message Block SMB client. A missing lock around the tccount increment in the smb2findsmbsesstconunlocked function creates a race condition. This vulnerability, caused by an incomplete refactoring of locking mechanisms, could lead to unexpected behavio...
CVE-2026-80676
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...
CVE-2022-4994
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: wean fast IN from emulatorpioin Use emulatorpioin directly for fast PIO instead of bouncing through emulatorpioin now that emulatorpioin fills "val" when handling in-kernel PIO. vcpu-arch.pio.count is guaranteed to be...
[SECURITY] Fedora 44 Update: python-libcst-1.8.6-4.fc44
LibCST parses Python source code as a CST tree that keeps all formatting details comments, whitespaces, parentheses, etc. It's useful for building automated refactoring codemod applications and linters. LibCST creates a compromise between an Abstract Syntax Tree AST and a traditional Concrete...
CVE-2026-46071
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Avoid clearing VMCBLBR in vmcb12 svmcopylbrs always marks VMCBLBR dirty in the destination VMCB. However, nestedsvmvmexit uses it to copy LBRs to vmcb12, and clearing clean bits in vmcb12 is not architecturally defined...
EUVD-2026-32453
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Avoid clearing VMCBLBR in vmcb12 svmcopylbrs always marks VMCBLBR dirty in the destination VMCB. However, nestedsvmvmexit uses it to copy LBRs to vmcb12, and clearing clean bits in vmcb12 is not architecturally defined...
Quality and Security Signals in AI-Generated Python Refactoring Pull Requests
As AI agents increasingly contribute to code development and maintenance, there is still limited empirical evidence on the quality and risk characteristics of their changes in real-world projects, particularly for refactoring-oriented contributions. It remains unclear how agent-authored refactori...
Wasmtime has host panic when Winch compiler executes `table.fill`
Impact Wasmtime's Winch compiler contains a vulnerability where the compilation of the table.fill instruction can result in a host panic. This means that a valid guest can be compiled with Winch, on any architecture, and cause the host to panic. This represents a denial-of-service vulnerability i...
GHSA-Q49F-XG75-M9XW Wasmtime has host panic when Winch compiler executes `table.fill`
Impact Wasmtime's Winch compiler contains a vulnerability where the compilation of the table.fill instruction can result in a host panic. This means that a valid guest can be compiled with Winch, on any architecture, and cause the host to panic. This represents a denial-of-service vulnerability i...
EUVD-2026-21025
Wasmtime has host panic when Winch compiler executes table.fill...
Moving beyond Strings in Spring Data
If you've worked with data access in Java and especially with Spring Data for a while, then you are familiar with various Query and Update programming models. You write data access code. You refactor a property name. You run your tests. They fail. Your query strings? Still pointing to the old...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003945)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003945 advisory. In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. This is related to sndtimerope...
LLM-Based Vulnerable Code Augmentation: Generate or Refactor?
Vulnerability code-bases often suffer from severe imbalance, limiting the effectiveness of Deep Learning-based vulnerability classifiers. Data Augmentation could help solve this by mitigating the scarcity of under-represented CWEs. In this context, we investigate LLM-based augmentation for...
CVE-2025-13470
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key PKESK packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted using public-key encryption in this release...
CLSA-2025-1763122640 edk2: Fix of 3 CVEs
CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when processing GPT partition tables - CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when calculating PE image event size - CVE-2022-36765: fix integer overflow in CreateHob function that could lead to...
When AI Accelerates Cloud Migrations, Don't Let Security Be an Afterthought
The era of on-premises infrastructure is quickly becoming a thing of the past, with research from Pluralsight showing that over 90% of organizations now leverage the cloud. What’s driving the even faster shift over the last few years? Consider AWS's foray into generative AI programs and agents fo...