jsprime

Auteurs Nishant Das Patnaik nishant.dp@ Sarathi Sabyasachi Sahoo sarathisahoo@ Introduction Aujourd'hui, de plus en plus de développeurs se tournent vers JavaScript comme langage de prédilection. La raison est simple : JavaScript a commencé à être accepté comme langage de programmation mainstream...

Adhrit

أدهريت هي مجموعة مفتوحة المصدر لعكس وتحليل تطبيقات Android APK. الأداة هي جهد لإيجاد حل فعال لجميع احتياجات اختبار أمان الأجهزة المحمولة والأتمتة. تم بناء أدهريت مع التركيز على المرونة والنمطية. يستخدم أدهريت حاليًا معايير Ghera لتحديد أنماط الثغرات في تطبيقات Android. يخضع المشروع لتحديثات مستمر...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...

gradle-static-analysis-plugin

УСТАРЕЛО Плагин Gradle для статического анализа ⚠️ Форк этого проекта поддерживается по адресу https://github.com/GradleUp/static-analysis-plugin/ Пожалуйста, выполните миграцию, используя идентификатор плагина com.gradleup.static-analysis. Плагин Gradle для простого применения одинаковой...

octopus

أخطبوط شكر جزيل لـ QuoScient لرعايتها لهذا المشروع. أخطبوط هو إطار تحليل أمني لوحدات WebAssembly والعقود الذكية على سلاسل الكتل Blockchain. الهدف من أخطبوط هو توفير طريقة سهلة لتحليل وحدات WebAssembly مغلقة المصدر والبايت كود للعقود الذكية لفهم سلوكياتها الداخلية بشكل أعمق. الميزات المتصفح Explor...

paimei

PaiMei est un framework de rétro-ingénierie composé de plusieurs composants extensibles. Le framework peut essentiellement être considéré comme un couteau suisse pour rétro-ingénieurs et a déjà fait ses preuves pour un large éventail de tâches statiques et dynamiques telles que l'assistance au...

glasgo

Glasgo — инструмент статического анализа Официальный репозиторий проекта перенесён в Github-ttarvis/glasgo. Проект Это инструмент статического анализа, написанный на Go для Go-кода. Он находит проблемы безопасности и некоторые проблемы корректности, которые могут иметь последствия для безопасност...

lightweight_static_analysis

Analyse statique légère Ce dépôt contient le code de preuve de concept PoC d'une présentation à ShellCon 2019, « Rolling Your Own: How to Write Custom, Lightweight Static Analysis Tools » diapositives. En résumé, ce dépôt démontre quelques exemples concrets de la manière dont vous pouvez construi...

action-octoscan

📦 :octocat: action octoscan Une action GitHub qui effectue une analyse de sécurité de vos actions GitHub. Cette action est basée sur octoscan 🤸 Utilisation Personnalisation Entrées Sorties Permissions 🤸 Utilisation Voici un exemple de base d'utilisation de cette action. Cela fonctionnera pour les...

sentrymcp

sentrymcp Сканер безопасности, сочетающий статический и динамический runtime анализ MCP-серверов Model Context Protocol. В период с января по апрель 2026 года исследователи безопасности раскрыли более 40 CVE в реализациях MCP-серверов, а сканирование публичных MCP-серверов, проведённое Endor Labs...

maldrolyzer

maldrolyzer Cadre simple pour extraire des données 'exploitables' à partir de malwares Android C&Cs, numéros de téléphone, etc. Installation Vous devez installer les paquets suivants avant d'utiliser ce projet : Androguard git clone https://github.com/androguard/androguard; cd androguard; sudo...

Linux Distros Unpatched Vulnerability : CVE-2026-72484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if...

CVE-2026-72406

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

UBUNTU-CVE-2026-72245

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72484 staging: most: video: avoid double free on video register failure

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...

EUVD-2026-59383

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...

CVE-2026-72240

The CVE-2026-72240 entry describes a Linux kernel issue in the mfd: sm501 driver where a reference leak occurs when platform_device_register() fails during sm501_register_device(). The embedded struct device in pdev is initialized (via device_initialize()), then proceeds through setup_pdev_dma_ma...

CVE-2026-72005

This CVE concerns the Linux kernel wifi rt2x00 driver. The issue arises in rt2x00lib_probe_dev() which could take a full removal teardown path (rt2x00lib_remove_dev()) for probe failures before critical resources (drv_data, workqueue, intf_work, autowakeup_work, sleep_work) were initialized. The ...

PT-2026-72194

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00lib probe dev uses the full rt2x00lib remove dev teardown for all probe failures. However, drv data allocation and workqueue allocation can fail before intf work,...

PT-2026-72672

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure comp register videodev allocates a video device with video device alloc and releases it if video register device fails. This can double free the video device when...