grafeo

ACT Platform이 이제 grafeo로 명칭이 변경되었습니다! Grafeo는 사용자 정의 데이터 모델을 생성하고 지식을 수집 및 공유할 수 있는 다목적 플랫폼입니다. 모든 목적에 사용할 수 있는 유연하고 완벽한 솔루션입니다. ACT 연구 프로젝트의 일환으로 개발되었으며, ACT의 핵심을 이루고 ACT 백엔드를 구동합니다. ACT에 대한 자세한 내용은 여기에서 확인하세요. 사용법 Grafeo는 REST API 세트를 제공합니다. API 사용 방법에 대한 이 가이드라인을 참조하세요. 설치 전제 조건 Java 17 이상...

IAGA-Sentinel

IAGA Sentinel EU AI Act 적합성 증거 계층 for AI 에이전트. 에이전트가 이를 통해 라우팅하는 모든 행동에 대해 암호학적으로 서명되고 재생 검증 가능한 증거를 제공하며, AI Act 제12조 기록 보관 및 부속서 IV 문서화를 지원하도록 구조화되어 있습니다. 문서 · 프롬프트 하나로 설정 · 빠른 시작 · 자율 에이전트 설정 · 커뮤니티 vs 엔터프라이즈 · 우리는 누구인가 · 라이선스 EU에서 세 명의 창업자프랑스인, 독일인, 이탈리아인가 구축했으며, 마케팅 검증이 아닌 연구 검증을 거쳤습니다: AISE...

hardware-compliance-handbook

Hardware Compliance Knowledge Base A fact-checked, open reference on the EU laws that govern hardware and IoT cybersecurity — CRA, RED, NIS2, and the Cybersecurity Act/EUCC, in one place instead of four. Prepared by Platanor Technologies platanor.com — an embedded security firm for IoT device...

OWASP-Model-Card-Security-Standard

상태: 초안 — OWASP 인큐베이팅 프로젝트 이 표준은 활발히 개발 중입니다. 기여와 피드백은 언제나 환영합니다. 이게 뭔가요? HuggingFace나 다른 저장소에서 사전 학습된 모델을 다운로드할 때, 여러분은 본질적으로 블랙박스를 신뢰하는 것입니다. 모델이 어떤 데이터로 학습되었는지, 그 데이터에 개인정보가 포함되어 있는지, 적대적 공격에 대해 어떻게 테스트되었는지, 알려진 실패 모드가 무엇인지 알 수 없습니다. 대부분의 취미 프로젝트에서는 괜찮습니다. 실제 사용자, 규제 산업 또는 민감한 데이터를 다루는 경우라면 — 정...

CVE-2026-61628

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-61628 CVE-2026-61628 nginx-ignition 2.41.0 — lucasdillmann nginx ignition은 nginx 웹 서버를 위한 사용자 인터페이스입니다. 버전 2.41.1 이전에서 POST /api/users/onboarding/finish가 익명비인증으로 등록되어 있으며, 전체 ReadWrite 관리자 권한을 가진 사용자를 생성합니다. 핸들러가 온보딩 완료 여부 확인과 사용자 생성...

CERTFR-2026-ACT-041

creationtimestamp| type| source ---|---|--- 2026-09-28 12:19:21+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mwlcdqjr4i2n 2026-09-28 12:19:24+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117348627942943001...

PT-2026-98556

In the Linux kernel, the following vulnerability has been resolved: net/sched: act api: release all action references on NEWACTION failure When a batched RTM NEWACTION request replaces an existing action, tcf idr check alloc takes a temporary reference on it. If a later action fails to initialize...

CVE-2026-43642

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43642 Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

EUVD-2026-84622

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

CVE-2026-43642 Softaculous Virtualizor PHP Object Injection via Billing Module Handler

Softaculous Virtualizor before 3.2.9 Patch 9 and 3.0.0 contains a PHP object injection vulnerability in the billing module handler that allows unauthenticated remote attackers to supply arbitrary serialized PHP objects for deserialization by setting the act parameter to login with the...

PT-2026-94426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Issues exist in the tcf skbmod act function regarding length calculations and header handling. The function incorrectly assumes the transport header is set when calling skb network heade...

AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of

Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good,...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Do not pass actlen in the usbbulkmsg error path. syzbot reported that actlen in kalmiasendinitpacket is uninitialized when it is passed to the first usbbulkmsg error path. Jiri Pirko noted that it’s pointless to...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: veth: Ensure that the eth header is in the linear part of the skb structure. After feeding a decapsulated packet to a veth device using actmirred, skbheadlen might be set to 0. However, vethxmit calls devforwardskb, which expects...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Do not override retval if we have already lost the skb. If we are redirecting the skb, and have not yet called tcfmirredforward, we need to inform the kernel to discard the skb by setting the retcode to SHOT...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added a NULL check for the lookupatid function. The lookupatid function may return NULL if the ATID is invalid or does not exist in the identifier table. This could lead to dereferencing a null pointer without any...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow actct to bind to clsact/ingress qdiscs and shared blocks. As Paolo mentioned earlier 1: “Since the problematic commit below, classify can return TCACTCONSUMED while holding the current skb that is managed by...

cra-watch

cra-watch Does anything you ship have a known-exploited vul...

CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection

A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.120251110. This vulnerability affects the...