CVE-2021-42574

Trojan Source: Невидимые уязвимости - Генератор кода — Если коротко, суть уязвимости в том, что код выглядит иначе, чем при компиляции : Атака заключается в использовании управляющих символов, встроенных в комментарии и строки, для перестановки символов исходного кода таким образом, чтобы изменит...

TrojanSourceFinder

TrojanSourceFinder TrojanSourceFinder aide les développeurs à détecter la vulnérabilité « Trojan Source » dans le code source. La vulnérabilité Trojan Source permet à un attaquant de faire passer un code malveillant pour un code innocent. En général, l'attaquant tente de tromper en faisant passer...

CVE-2021-42574

CVE-2021-42574 - Генератор кода // Обновление: 05.11.2021 Теперь можно не только кодировать, но и декодировать файлы. Это означает, что теперь файлы, содержащие поддерживаемые bidi-символы, могут быть преобразованы в шаблонные файлы с bidi-заполнителями LRO, .... Создавайте вредоносные файлы,...

bidi-guard

bidi-guard Сканировать код на наличие невидимых двунаправленных символов Unicode Зачем это нужно Невидимые двунаправленные символы Unicode могут заставить исходный код отображаться иначе, чем он выполняется. Это CVE-2021-42574 — атака Trojan Source. Злоумышленник встраивает символы, которые меняю...

nullorigin

NullOrigin 🛡️ Универсальное промежуточное ПО для санитизации провенанса и водяных знаков ИИ Научный артефакт — только для оценки устойчивости водяных знаков. 🔬 Только для исследовательских целей NullOrigin — это научный артефакт. Он публикуется для поддержки академического и независимого изучения...

unicode-control-characters-action

Действие для поиска управляющих символов Unicode Действие GitHub для поиска управляющих символов Unicode с помощью диагностического инструмента Red Hat https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 для обнаружения атак типа Trojan source RHSB-2021-007...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-gcc / gcc-toolset-10-gcc-c++ / etc (crlsa-2021_4585)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214585 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in gcc ...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-11-gcc / gcc-toolset-11-gcc-c++ / etc (crlsa-2021_4586)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214586 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in gcc ...

Rocky Linux 8 [CIQ] Security Update: cpp / cpp-debuginfo / gcc / gcc-c++ / gcc-c++-debuginfo / etc (crlsa-2021_4587)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214587 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in gcc ...

Rocky Linux 8 [CIQ] Security Update: cargo / cargo-debuginfo / cargo-doc / clippy / clippy-debuginfo / etc (crlsa-2021_4590)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214590 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in rust...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-11-annobin-annocheck / etc (crlsa-2021_4591)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214591 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-annobin / gcc-toolset-10-annobin-debuginfo (crlsa-2021_4592)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214592 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: annobin / annobin-annocheck / annobin-annocheck-debuginfo / etc (crlsa-2021_4593)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214593 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-11-binutils / gcc-toolset-11-binutils-debuginfo / etc (crlsa-2021_4594)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214594 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: binutils / binutils-debuginfo / binutils-debugsource / etc (crlsa-2021_4595)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214595 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-binutils / gcc-toolset-10-binutils-debuginfo / etc (crlsa-2021_4649)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214649 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: clang / clang-analyzer / clang-debuginfo / clang-debugsource / etc (crlsa-2021_4743)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214743 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in clan...

terminal-poc-corpus

terminal-poc-corpus A defensive, machine-readable corpus...

MiracleLinux 7 : binutils-2.27-44.base.el7.1 (AXSA:2021-2508:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2508:04 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-toolset-10-annobin-9.29-1.el8.2, gcc-toolset-10-gcc-10.3.1-1.2.el8 (AXSA:2021-2881:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2881:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...