pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

CVE-2013-3900_Remediation_PowerShell

CVE-2013-3900RemediationPowerShell 레지스트리를 변경하여 CVE-2013-3900을 수정하는 스크립트입니다. 환경에서 문제가 발생할 경우 되돌릴 수 있는 옵션이 함께 제공됩니다. 단계 스크립트를 다운로드하고 관리자 권한으로 실행한 후 컴퓨터를 재부팅하십시오...

tools-python

SPDX 문서를 파싱, 검증 및 생성하는 Python 라이브러리 CI 상태 Linux, macOS 및 Windows: v0.7 - v0.8 주요 변경 사항 예정된 0.8 릴리스는 곧 출시될 SPDX v3.0 릴리스를 준비하기 위해 대대적인 리팩토링을 거쳤으며, 이로 인해 API에 호환성이 깨지는 변경breaking changes이 발생했습니다. 마이그레이션 가이드를 참조하여 기존 코드를 업데이트하세요. v0.8의 주요 기능은 다음과 같습니다: v2.2 및 v2.3 사양에 대한 SPDX 문서의 전체 검증 모든 v2.3 기능을 갖...

jvmxray

JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

WordPress OneTone theme <= 3.0.6 – Unauthenticated Options Changes

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. id: CVE-2019-17230 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Options Changes author: daffainfo severity: medium description: | includes/theme-functions.php in...

get-pixels-updated

Это обновленная версия get-pixels, которая исправляет уязвимость безопасности CVE-2020-8175. На момент создания все файлы идентичны файлам из оригинального репозитория, за исключением package.json. get-pixels-updated Ниже приведено описание со страницы get-pixels на GitHub. Как уже упоминалось,...

Invoke-DCSync

Invoke-DCSync Invoke-DCSync 참고: https://adsecurity.org/?p=1729 참고: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ 목표: mimikatz DCSync 기능을 사용하여 도메인 컨트롤러에 있는 모든 사용자 계정의 비밀번호 해시를 검색합니다. 경고: 랩 환경에서만 수행하십시오. mimikatz는 DCSync라는 도구를 구현했습니다. 이를 통해 mimikatz는 도메인 컨트롤러를 가장하여 다른 도메인...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

CVE-2026-103494

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes...

fastify vulnerable to request body replacement via an async validation result collision

Impact Fastify runs a route's validator and, for a result shaped like value, error , unwraps it: an error becomes a validation failure and value replaces the request part. This convention is intended for synchronous custom compilers for example Joi. A JSON Schema $async validator, however, resolv...

EUVD-2026-70984

fastify vulnerable to request body replacement via an async validation result collision...

CVE-2026-102129

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges...

CVE-2026-76731

An authentication bypass vulnerability exists in the captive portal of HPE Networking Instant On . This flaw could allow an unauthenticated remote attacker to circumvent existing authentication controls. If successfully exploited, the attacker could gain limited access to some data and perform li...

CVE-2026-102437

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...

CVE-2026-102437 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix

OS Command Injection in internal/gitcmd git diff filter.clean/smudge invocation in esengine DeepSeek-Reasonix Reasonix Studio allows a local attacker who controls repository content .gitattributes + .git/config to execute arbitrary commands via the desktop app's workspace-changes diff viewer...