Haoxi Tan

I made a Dockerfile with ubuntu 1604, which produced a container with a working fcd build, along with a start wrapper script.

There were few errors during `make run` due to new nightly changes in rust. Also version bumped some stuff. Major Errors fixed: expected struct `x86_64::VirtAddr`, found `u64` in interrupts.src rbx...

The kernel throws `#UD` (illegal instruction) error when `syscall` is ran; can it be enabled in boot?

Hi, I am trying to port some userland applications to biscuit. How did you compile and test redis and nginx? Also, why is USERMIN so high? Why not something like...

Delete the lines that make the identifier of the output yara file named the path of goodware (`args.g`); it should always be based on the path of malwarew (`args.m`)

add CVE-2023-46805 and CVE-2024-21887 Ivanti Mitigation not applied

5

### Template / PR Information - Ivanti CVE-2023-46805 and CVE-2024-21887 has no patches yet, but has mitigation files released. This template detects when they have not been applied - References:...

non-intrusive template for CVE-2023-7028 GitLab

2

### Template / PR Information - Added CVE-2023-7028 - References: - https://www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-zero-click-account-hijacking-vulnerability/ - https://gitlab.com/gitlab-org/gitlab/-/commit/c571840ba2f0e91ca7ec3c436f796532dbb3c550#27e06e15cfe9583d733619cf7d72629b777f7757_41290_41287 - https://nvd.nist.gov/vuln/detail/CVE-2023-7028 ### Template Validation I've validated this template locally? - [x] YES - [ ]...

It doesn't work; wrong use of python dictionary

1

Use of python dictionary here https://github.com/RandomRobbieBF/CVE-2023-7028/blob/c141972fc4f653ad48a2ae1a3b0d0ca7c2b1e2a9/CVE-2023-7028.py#L28 means only the attacker's email get sent; the exploit doesn't work. Python dicts deduplicate keys automatically