CVE-2024-3094-XZ-Utils-Check

JB-Network - check-xz.sh Утилита для проверки, установлена ли у вас уязвимая версия в соответствии с CVE-2024-3094. Установка Чтобы использовать её, откройте терминал и выполните: cd;mkdir git;git clone https://github.com/jbnetwork-git/linux-tools.git chmod +x /git/check-xz.sh Как выполнить? cd...

CVE-2022-30190

CVE-2022-30190 Скрипт взят из https://github.com/JohnHammond/msdt-follina, просто упрощён для моего использования. Этот скрипт предназначен для генерации полезной нагрузки. За дополнительной информацией обращайтесь по ссылке John Hammond...

high-pcode

Ghidra의 고급 PcodePcodeAST 출력 Ghidra는 Pcode라고 하는 프로세서 독립적 표현을 사용합니다. 스크립트에서 이를 쉽게 가져와 사용할 수 있습니다Instruction.getPcode. 덜 알려진 사실은 디컴파일러가 더 높은 수준의 Pcode 표현을 노출한다는 것입니다. 프로세서 독립적 알고리즘이나 AI 모델 훈련에 Pcode를 사용할 때의 문제는 저수준 Pcode가 그 기원이 된 어셈블리 언어와 매우 유사해 보인다는 점입니다. 저수준 Pcode는 각 어셈블리 명령어를 Pcode 언어로 구현한 것에...

EUVD-2026-15459

textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to childprocess.exec in lib/extractors/doc.js, rtf.js, dxf.js, images.js, and lib/util.js with inadequat...

textract is vulnerable to OS Command Injection

textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to childprocess.exec in lib/extractors/doc.js, rtf.js, dxf.js, images.js, and lib/util.js with inadequat...

PT-2024-15721 · Unknown · Deepfacelab

Name of the Vulnerable Software and Affected Versions: DeepFaceLab pretrained DF.wf.288res.384.92.72.22 Description: A problematic vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. The issue affects an unknown function of the file mainscripts/Util.py and leads to...

USN-65-1: Apache utility script vulnerability

Javier Fernández-Sanguino Peña noticed that the "checkforensic" script created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...