Noctyra

Noctyra Noctyra는 코드 변환 및 난독화 해제를 위해 설계된 AST 기반 프레임워크입니다. 복잡한 표현식과 로직을 해결하여 Python 소스 코드를 분석하고 단순화하는 모듈식 파이프라인을 제공합니다. 개요 이 프로젝트는 Python의 추상 구문 트리Abstract Syntax Tree를 처리할 수 있는 유연한 환경을 제공하는 것을 목표로 합니다. 일련의 플러그인 가능한 변환기를 사용하여 Noctyra는 다음을 수행할 수 있습니다: 중첩된 로직 및 조건 단순화 정적 값 및 일반적인 인코딩 패턴 해결 동적 실행 블록을 ...

SiMBA

SiMBA SiMBAは、線形混合ブール算術式（MBA）の簡約のためのツールです。MBA-BlastやMBA-Solverと同様に、線形MBAがゼロと一の集合上の値によって完全に決定されるという考えに基づく完全に代数的なアプローチを使用していますが、そのためには1ビット空間への変換が不要であるという新しい洞察を活用しています。 これは以下の論文に基づいています： root@kitploit: @inproceedingssimba2022, author = Reichenwallner, Benjamin and Meerwald-Stadler, Peter, title =...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

GAMBA

GAMBA GAMBA는 혼합 부울-산술 표현식MBA을 단순화하기 위한 도구입니다. GAMBA는 General Advanced Mixed Boolean Arithmetic simplifier의 약자입니다. 선형 대수 단순화 도구 SiMBA를 반복적으로 사용하여 잠재적으로 비선형 입력 MBA의 선형 하위 표현식을 단순화합니다. 전반적으로 핵심 구성 요소는 다음과 같습니다: 추상 구문 트리AST 사용 간단하고 정교한 변환을 적용하여 선형 하위 표현식 분리 단순화할 수 있는 선형 하위 표현식을 구성할 가능성을 높이기 위한 리팩토링...

awesome-mba

このリポジトリには、Mixed Boolean-Arithmetic MBA 難読化に関連するリンクが含まれています。PR は歓迎します。 ここにあるリソースの中には、MBA に 厳密に 関連しているわけではないものもありますが、すべて何らかの形で関連しています。 論文 Mixed Boolean-Arithmetic 変換を用いたソフトウェアにおける情報隠蔽 Mixed Boolean-Arithmetic 式による難読化：再構築、解析、簡略化ツール Mixed Boolean-Arithmetic 式を簡略化する直交アプローチの解析と応用 プログラム合成支援による Mixed...

CVE-2026-53378

In the Linux kernel, the following vulnerability has been resolved: drm/colorop: Fix blob property reference tracking in state lifecycle The colorop state blob property handling had memory leaks during state duplication, destruction, and reset operations. The implementation failed to follow the...

CVE-2026-43319

CVE-2026-43319 affects the Linux kernel spidev driver. The vulnerability stemmed from inverted lock ordering between spi_lock and buf_lock across code paths (write/read use buf_lock then spi_lock; ioctl uses spi_lock then buf_lock), enabling potential deadlocks in multi-threaded access. The fix u...

Automatic Simplification of Common Vulnerabilities and Exposures Descriptions

Understanding cyber security is increasingly important for individuals and organizations. However, a lot of information related to cyber security can be difficult to understand to those not familiar with the topic. In this study, we focus on investigating how large language models LLMs could be...

CVE-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

CVE-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

SUSE CVE-2025-71130

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915gemdoexecbuffer Initialize the eb.vma array with values of 0 when the eb structure is first set up. In particular, this sets the eb-vmai.vma pointers to NULL, simplifying...

EUVD-2024-2007

Malicious code in bioql PyPI...

EUVD-2025-12867

Malicious code in bioql PyPI...

EUVD-2024-53800

Malicious code in bioql PyPI...

EUVD-2024-53300

Malicious code in bioql PyPI...

SUSE CVE-2025-39677

In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdiscdequeueinternal This issue applies for the following qdiscs: hhf, fq, fqcodel, and fqpie, and occurs in their change handlers when adjusting to the new limit. The problem is the following...

A new type of long-lived key on AWS: Bedrock API keys

New AWS Bedrock keys simplify authentication while raising security considerations...

JsDeObsBench: Measuring and Benchmarking LLMs for JavaScript Deobfuscation

Deobfuscating JavaScript JS code poses a significant challenge in web security, particularly as obfuscation techniques are frequently used to conceal malicious activities within scripts. While Large Language Models LLMs have recently shown promise in automating the deobfuscation process,...

CVE-2022-50066 net: atlantic: fix aq_vec index out of range error

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix aqvec index out of range error The final update statement of the for loop exceeds the array range, the dereference of self-aqveci is not checked and then leads to the index out of range error. Also fixed this...