958 matches found
attackgen
AttackGen AttackGen 是一款网络安全事件响应测试工具,它利用大语言模型的能力以及全面的 MITRE ATT&CK 和 ATLAS 框架。该工具根据用户选择的威胁行为者组织、AI 攻击案例研究以及您组织的详细信息,生成量身定制的事件响应场景。 目录 为仓库加星 功能特性 版本发布 环境要求 安装 LangSmith 设置 数据设置 运行 AttackGen MCP 服务器 Agent 技能 使用方法 安全最佳实践 贡献指南 许可证 为仓库加星 如果您觉得 AttackGen 有用,请考虑在 GitHub 上为仓库加星。这有助于更多人发现该工具。非常感谢您的支持!⭐ 功能特...
stride-gpt
STRIDE GPT is an AI-powered threat modelling tool that leverages Large Language Models LLMs to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application details, such as the application type, authentication methods, and whether the...
Atlas
Atlas - 高速SQLMapタンパーサジェスター v1.0 Atlasは、WAF/IDS/IPSをバイパスするためのsqlmapタンパーを提案できるオープンソースツールです。このツールは返されたステータスコードに基づいています。 スクリーンショット インストール root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+ 使い方 root@kitploit: $ python atlas.py --url...
cve-2019-10070-apache-atlas-xss
此存储库没有 README。...
Atlas
Atlas Atlas is a cross-platform Windows/Linux network execution and security assessment toolkit built on top of TrustedSec's Titanis protocol library. It is inspired by the workflow of NetExec/CrackMapExec: target lists, credential sets, modular enumeration, and compact HH:mm:ss + host - message...
AtlasLdr
Atlas 是一个反射式 x64 加载器,具有以下功能: 功能 从远程服务器获取 DLL 和 PE 在远程进程中手动映射 擦除 DOS Header 和 NTHeader 的 Magic 字节 位置无关代码 使用间接系统调用 ZwOpenProcess ZwAllocateVirtualMemory ZwProtectVirtualMemory ZwQuerySystemInformation ZwFreeVirtualMemory ZwCreateThreadEx 所有系统调用共用一个 Stub 动态获取 SSN 动态解析系统调用地址 Atlas 还使用 LdrLoadDll...
CVE-2026-3909
CVE-2026-3909 Chromium 浏览器 PoC 本仓库包含一个针对 CVE-2026-3909 的概念验证(PoC),可在 Chromium 浏览器中可靠触发。 背景 官方针对此漏洞的 Skia 修复仅包含一个简化的演示测试用例: 官方演示 :AtlasOobTest.cpp 它无法在真实的 Chromium 环境中运行。官方演示有意进行了限制,并省略了关键的触发条件。 本 PoC 基于官方演示构建,并经过修改,可在真实的 Chromium 浏览器环境中可靠触发该漏洞。 包含的补丁 本 PoC 包含对以下文件的修改: 1...
Linux Distros Unpatched Vulnerability : CVE-2026-82073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks...
CVE-2026-82073
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...
CVE-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...
EUVD-2026-72916
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...
Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...
CVE-2026-82073
MongoDB Server aggregation framework is affected by an improper validation vulnerability (CVE-2026-82073). When Atlas Search features are in use, an authenticated user with limited read privileges can bypass view-level authorization checks and read data from unauthorized collections by manipulati...
CVE-2026-15247
The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...
WordPress Search Atlas SEO plugin < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion vulnerability
Subscriber+ Google Service Account Credential Overwrite/Deletion vulnerability discovered by Shivamani Vastrala in WordPress Plugin Search Atlas SEO versions 2.6.24...
EUVD-2026-71845
The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...
CVE-2026-15247 Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...
CVE-2026-15247
CVE-2026-15247 affects the Search Atlas SEO WordPress plugin in versions prior to 2.6.24 . The root cause is a missing nonce or capability check before processing a settings update in one of the plugin's early-priority handlers. This allows any authenticated user at the Subscriber level or above ...
CVE-2026-15247 Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account...
PT-2026-86319
🚨 CVE-2026-15247 The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google...