Shellcode-Test-Harness

Shellcode 测试工具 一个轻量级的测试工具，旨在通过提供集成崩溃诊断和调试输出重定向的执行环境，加速 shellcode 的开发。 特性 通过模块踩踏执行 shellcode 使用 VEH 捕获崩溃：如果 shellcode 出错，它会在故障点打印寄存器转储、堆栈转储和代码转储。 实时调试输出：拦截 shellcode 输出并在控制台中显示。 内置十六进制转储工具：通过在调试输出前添加 "HEXDUMP:0xADDR:SIZE"，加载器将自动转储该内存范围。 DLL 发现：查找兼容的 DLL，可选择过滤掉那些没有足够大的 .text 节来容纳特定 payload 的 DLL。...

Agent-Security-Regression-Harness

OWASP 智能体安全回归测试框架 OWASP 智能体安全回归测试框架是一个开源、厂商中立的测试框架，用于针对智能体应用和集成 MCP 的系统运行可执行的安合回归测试场景。 该项目帮助构建者和防御者验证对提示词、模型、工具、检索来源、记忆、审批流程或 MCP 集成的更改不会重新引入已知的安全故障。 该项目的作用 该项目提供了一个以代码为先的测试框架，用于： 运行可复现的智能体安全滥用案例场景 通过策略断言验证预期的安全结果 为本地开发和 CI 生成机器可读的结果 捕获执行追踪以用于调试和审计 为智能体和 MCP 安全风险构建可复用的场景库 该项目不是什么 该项目不是： 基准测试 扫描器...

SetCookieAnalysisInBrowsers

Set Cookie Analysis in Browsers Licencia Publicado bajo AGPL consulte LICENSE para obtener más información. Descripción Para obtener más información, consulte la siguiente entrada de blog:...

IPI-Proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents against Indirect Prompt Injection

Web-browsing AI agents are increasingly deployed in enterprise settings under strict whitelists of approved domains, yet adversaries can still influence them by embedding hidden instructions in the HTML pages those domains serve. Existing red-teaming resources fall short of this scenario:...

SUSE CVE-2025-68725

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skbwarnbadoffload from netifskbfeatures - gsofeaturescheck. When a BPF program - triggered via BPF...

AZL-64884 CVE-2025-38274 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpgamgrtestimgloadsgt fpgamgrtestimgloadsgt allocates memory for sgt using kunitkzalloc however it does not check if the allocation failed. It then passes sgt to sgalloctable, which passe...

[SECURITY] Fedora 40 Update: maven-verifier-2.0.0~M1-7.fc40

Provides a test harness for Maven integration tests...

new packages: perl-Test-Harness

An update is available for perl-Test-Harness. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

new module: perl:5.30

An update is available for perl-Pod-Perldoc, perl-DBI, perl-Pod-Escapes, perl-Devel-PPPort, perl-Pod-Usage, perl-Sub-Exporter, perl-perlfaq, perl-Object-HashBase, perl-CPAN-Meta-YAML, perl-Digest, perl-podlators, perl-bignum, perl-Text-ParseWords, perl-Text-Template, perl-DBD-MySQL, perl-Text-Glo...

Huawei EulerOS: Security Advisory for perl-Test-Harness (EulerOS-SA-2020-2051)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : perl-Test-Harness (EulerOS-SA-2020-2051)

According to the version of the perl-Test-Harness package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that perl can load modules from the current directory if not found in the module directories, via...

EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2020-1476)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-depende...

EulerOS 2.0 SP3 : perl (EulerOS-SA-2019-2648)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - 1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum,...

EulerOS 2.0 SP5 : perl (EulerOS-SA-2019-2220)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to...

Exploit for Use After Free in Google Chrome

CVE-2019-5786 Chrome 72.0.3626.119 stable FileReader UaF exploit...

Design/Logic Flaw

DISPUTED An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...

CVE-2018-13844

An issue has been found in HTSlib 1.8. It is a memory leak in fairead in faidx.c. NOTE: This has been disputed with the assertion that this vulnerability exists in the test harness and HTSlib users would be aware of the need to destruct this object returned by faiload in their own code...

CVE-2018-13844

HTSlib 1.8 contains a memory leak in fai_read (faidx.c). The issue is disputed: some sources attribute it to the test harness rather than HTSlib, and users are warned to destruct the object returned by fai_load() in their code. Concrete vulnerability details such as exploit vectors, affected vers...

CVE-2016-1238

1 cpan/Archive-Tar/bin/ptar, 2 cpan/Archive-Tar/bin/ptardiff, 3 cpan/Archive-Tar/bin/ptargrep, 4 cpan/CPAN/scripts/cpan, 5 cpan/Digest-SHA/shasum, 6 cpan/Encode/bin/enc2xs, 7 cpan/Encode/bin/encguess, 8 cpan/Encode/bin/piconv, 9 cpan/Encode/bin/ucmlint, 10 cpan/Encode/bin/unidump, 11...

openSUSE Security Update : librsvg (openSUSE-2016-608)

This librsvg update to version 2.40.15 fixes the following issues : Security issues fixed : - CVE-2016-4348: DoS parsing SVGs with circular definitions rsvgcssnormalizefontsize function boo977986 Bugs fixed : - Actually scale the image if required, regression fix from upstream git bgo760262. -...