Open Source Contributions

• Filter invalid ExFAT entries during EmbeddedFS Scanning May 13, 2026 · google/osv-scalibr

• PRP: Add Extractor for Nuget Project Assets May 6, 2026 · google/osv-scalibr

• Fix Arbitrary File Overwrite via Path Traversal in Embedded Filesystem Extraction May 2, 2026 · google/osv-scalibr

  The embedded filesystem extraction logic previously trusted file path entries from untrusted filesystem images without sufficient validation. This allowed sp...

• Annotator: filter embedded FS packages for plugins with the RunningSystem capability April 29, 2026 · google/osv-scalibr

  Annotators that require a running system may execute commands or binaries on the target filesystem. However, packages originating from embedded filesystems a...

• slacktoken: return error on ValidationFailed and update tests February 19, 2026 · google/osv-scalibr

  Ensure statusFromResponseBody returns a non-nil error when Slack API validation fails (non-invalid_auth error). Updated tests to assert error behavior using ...

• simplevalidate: add multi-endpoint support February 18, 2026 · google/osv-scalibr

  This change enhances the simplevalidate package by introducing support for validating secrets against multiple HTTP endpoints.

• ntuple: preserve full match span in FindAllMatchesGroup while returning subgroup value February 18, 2026 · google/osv-scalibr

• fix: prevent disk handle leak by calling disk.Close() on failure February 6, 2026 · google/osv-scalibr

  Ensure the disk handle is properly closed when opening the raw disk image or reading the partition table fails.

• Cleanup disk.Close() calls from specific Embeddedfs extractors February 6, 2026 · google/osv-scalibr

• Fix ntuples(fix): tuple overlap resolution, distance calculation, and deduplication logic January 23, 2026 · google/osv-scalibr

• refactor(gemspec): replace strings.Index with strings.Cut in trimRubyTrailingCondition January 19, 2026 · google/osv-scalibr

  This fixes lint errors related to strings.Index.

• PRP: Add Secret Extractor for Salesforce OAuth2 JWT Signing Key / Credentials January 18, 2026 · google/osv-scalibr

• PRP: Add Secret Extractor for Salesforce OAuth2 Refresh Tokens January 17, 2026 · google/osv-scalibr

• PRP: Add Secret Extractor for Salesforce OAuth2 Client Credentials January 17, 2026 · google/osv-scalibr

• PRP: Add Secret Extractor for Salesforce OAuth2 Access Tokens January 17, 2026 · google/osv-scalibr

• Refactor pair veles secret to use ntuple veles secret January 17, 2026 · google/osv-scalibr

• Add ntuple Veles Plugin January 13, 2026 · google/osv-scalibr

• Remove traces of Netports extractor from dpkg extractor December 29, 2025 · google/osv-scalibr

• fix(build): make build_protos.sh POSIX sh compatible December 29, 2025 · google/osv-scalibr

  build_protos.sh used bash arithmetic syntax (( … )) while being invoked via /bin/sh, causing runtime failures on systems where /bin/sh is dash.

• Remove duplicate ova extractor entry from supported inventory docs November 28, 2025 · google/osv-scalibr

• Add TempPaths field to EmbeddedFS and improve cleanup logic - #1465 October 16, 2025 · google/osv-scalibr

  Introduced a new TempPaths field in EmbeddedFS to track temporary files and directories created during extraction. Enhanced deferred cleanup logic to it...

• Add Extractor and Detector for NetScaler ADC / Gateway CVE-2025-7775 October 5, 2025 · google/osv-scalibr

• PRP: Add Extractor for VirtualBox disk images September 17, 2025 · google/osv-scalibr

  Related PR: https://github.com/google/osv-scalibr#1348 Related issue: https://github.com/google/osv-scalibr#1216

• Add secret detector for private keys (PEM/OpenSSH, DER: PKCS#1, PKCS#8, EC) August 20, 2025 · google/osv-scalibr

  Introduces a secret detector for private keys, supporting both PEM/OpenSSH blocks and DER-encoded formats.

• fix(afl-fuzz-init): ensure proper permissions for setting CPU governor March 10, 2025 · AFLplusplus/AFLplusplus

  The previous command used tee without sudo, which could fail due to insufficient permissions.

• Update linux-forensics.md April 2, 2024 · HackTricks-wiki/hacktricks

• Ensure termux installation script only runs from root directory March 13, 2024 · radareorg/radare2

  This fixes problems when script is invoked from directories other than the radare’s root directory.

• Fix tb instruction for ARM assembler ##asm March 19, 2023 · radareorg/radare2

  Current code unconditionally drops last 2 bits without checking if those 2 bits are set or cleared, if ignored these 2 bits are eventually lost and not encod...

• Integrate more conditional branch instructions and testcases for the arm64 assembler ##asm March 5, 2023 · radareorg/radare2

  Add testcase and aliases for bhs conditional branch instruction for the arm64 assembler ##asm bcs and b.cs are two aliases for bhs instruction

• releng: handle string checks carefully July 16, 2020 · frida/frida

  fixes build errors related to these check when the variable containing a string is empty ./releng/setup-env.sh: line 122: [: -ne: unary operator expected

• termux-packages: Add util-linux to build-essential May 15, 2019 · termux/termux-packages

• readline: Update from 7.0 to 8.0 February 25, 2019 · termux/termux-packages

• bash: Update from 4.4 to 5.0 February 25, 2019 · termux/termux-packages

• termux-app: Fix a typo in TermuxPreferences February 19, 2019 · termux/termux-float

• termux-float: Migrate to AndroidX January 19, 2019 · termux/termux-float

  This PR migrated Termux Float to AndroidX

• droidimg: fix a warning December 18, 2018 · nforest/droidimg

  fix_kaslr_4_4.c:172:31: warning: format specifies type ‘unsigned int’ but the argument has type ‘uint64_t’ (aka ‘unsigned long’) [-Wformat] …pr...