signature-base

Signature-Base Signature-Base est la base de signatures YARA et d'IOC pour nos scanners LOKI et THOR Lite Objectif de Signature-Base 1. Règles YARA et IOC de haute qualité avec un minimum de faux positifs 2. Structure claire 3. Format de règle cohérent Structure des répertoires iocs - Fichiers IO...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Procédure complète de test de pénétration Cible : HackSudo Thor de VulnHub Objectif : Obtenir un accès root et lire /root/proof.txt Environnement : Laboratoire VirtualBox isolé segmenté par un pare-feu pfSense Table des matières Aperçu Topologie du réseau Résumé de la chaîne d'attaq...

Kage-DFIR-toolkit

Наведите Kage на подозрительный Windows-хост — и он выполнит всю триаж-обработку одной цепочкой: CyLR собирает артефакты, Hayabusa сопоставляет журналы событий с правилами Sigma, THOR Lite ищет совпадения по YARA, VirusTotal и AbuseIPDB квалифицируют индикаторы, а выбранный вами AI-провайдер...

CVE-2026-45729

A flaw was found in Thor Vector Graphics ThorVG, a vector graphics engine. A remote attacker could exploit this vulnerability by providing untrusted SVG Scalable Vector Graphics data. This could lead to a denial of service DoS, causing the application to crash and become unavailable. The...

CVE-2026-45729

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run allows any caller that passes untrusted SVG data to Picture::load to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5...

CVE-2026-45729

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run allows any caller that passes untrusted SVG data to Picture::load to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5...

CVE-2026-45729 ThorVG: Null pointer dereference in SVG loader causes crash via 6-byte malformed input

Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to version 1.0.5, a null pointer dereference in SvgLoader::run allows any caller that passes untrusted SVG data to Picture::load to crash the process with a 6-byte payload. This issue has been patched in version 1.0.5...

PT-2026-45537

Name of the Vulnerable Software and Affected Versions Thor Vector Graphics ThorVG versions prior to 1.0.5 Description A null pointer dereference occurs in the SvgLoader::run function. This allows a caller to crash the process using a 6-byte payload by passing untrusted SVG data to the Picture::lo...

ruby4.0-rubygem-thor-1.4.0-1.3 on GA media (moderate)

ruby4.0-rubygem-thor-1.4.0-1.3 on GA media Announcement ID: openSUSE-SU-2026:10366-1 Rating: moderate Cross-References: CVE-2025-54314 CVSS scores: CVE-2025-54314 SUSE : 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N CVE-2025-54314 SUSE : 2...

OPENSUSE-SU-2026:10366-1 ruby4.0-rubygem-thor-1.4.0-1.3 on GA media

These are all security issues fixed in the ruby4.0-rubygem-thor-1.4.0-1.3 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 7 : rubygem-bundler-1.7.8-3.el7, rubygem-thor-0.19.1-1.el7 (AXSA:2015-789:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2015-789:01 advisory. rubygem-bundler Bundler manages an application's dependencies through its entire life, across many machines, systematically and repeatably rubygem-thor Thor i...

EUVD-2018-1252

Malware in sbrugna...

EUVD-2017-12148

Malware in sbrugna...

EUVD-2019-17741

Malware in sbrugna...

EUVD-2025-21984

Malicious code in bioql PyPI...

CVE-2025-54314 affecting package rubygem-thor for versions less than 1.2.1-3

CVE-2025-54314 affecting package rubygem-thor for versions less than 1.2.1-3. A patched version of the package is available...

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."

...

Low: ruby3.2

Issue Overview: Thor before 1.4.0 can construct an unsafe shell command from library input. CVE-2025-54314 Affected Packages: ruby3.2 Issue Correction: Run dnf update ruby3.2 --releasever 2023.8.20250808 or dnf update --advisory ALAS2023-2025-1124 --releasever 2023.8.20250808 to update your syste...

Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-1124)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1124 advisory. Thor before 1.4.0 can construct an unsafe shell command from library input. CVE-2025-54314 Tenable has extracted the preceding description block directly from the tested product security advisory. Note...

Command Injection

Thor is vulnerable to Command Injection. The vulnerability is due to unsafe command construction caused by the library forming shell commands directly from user-controlled input...