Claude-Skills-Governance-Risk-and-Compliance

مهارات Claude للحوكمة والمخاطر والامتثال GRC إرشادات امتثال بمستوى الخبراء لمعايير ISO 27001، وSOC 2، وFedRAMP، وGDPR، وHIPAA، وNIST CSF، وPCI DSS، والأمن السيبراني لـ TSA، ونظام إدارة الذكاء الاصطناعي ISO 42001، وإدارة معلومات الخصوصية ISO 27701، والمرونة التشغيلية الرقمية DORA، وقانون حماية...

cve-2025-24472-fortinet_authbypass_reproduction

CVE-2025-24472 — Fortinet FortiOS / FortiProxy Contournement de l'authentification Aperçu CVE-2025-24472 est une vulnérabilité de contournement de l'authentification dans Fortinet FortiOS et FortiProxy. Un attaquant non authentifié peut élaborer des requêtes proxy CSF Central Security Fabric...

csf

ArmourBird CSF - إطار أمن الحاويات ملاحظة: عميل CSF قيد التطوير النشط ويتم تحويله إلى لغة GoLang لتحسين الأداء والبنية. جدول المحتويات 1. حول 2. مخطط البنية 3. واجهات برمجة التطبيقات لخادم CSF 4. التثبيت/الاستخدام 5. بناء صور Docker 6. لمحة سريعة 7. المهام المتبقية 8. الموقع الإلكتروني 9. تويتر 1...

2024InformationSecurityEngineer

2024InformationSecurityEngineer Ingénieur en sécurité de l'information 2024, 2024InformationSecurityEngineer Ingénieur en sécurité de l'information – second semestre 2024 Récapitulatif des exemples de questions Date de l'examen : 2024年11月08日 I. Capture de paquets du pare-feu 14 points 1. Longueur...

cPanel-Fix

Assistant de sécurité cPanel & noyau Un security-remediation.sh pour CVE-2026-41940 cPanel, CVE-2026-31431 noyau « Copy Fail », CSF, nettoyage optionnel des domaines/proxy, et durcissement optionnel de l'opérateur. Mainteneur : Aria Jahangiri Far Clonage git clone...

CVE-2026-65638

Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. The vulnerability affects versions of the software originally distributed by ConfigServer, as well...

CVE-2026-65639

OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data. The vulnerability affects versions of the...

EUVD-2026-70850

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...

The vulnerability of the `panthor_kernel_bodestroy()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the panthorkernelbodestroy function in the drivers/gpu/drm/panthor/panthorgem.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to the reutilization of previously freed memory. Exploitin...

Malicious code in csf-web-common (npm)

The package csf-web-common was found to contain malicious code...

MAL-2025-17777 Malicious code in csf-web-common (npm)

The package csf-web-common was found to contain malicious code...

WordPress plugin CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin CITS Support svg, webp Media a...

Authentication bypass in Node.js websocket module and CSF requests

...

Malicious code in mdx2-csf (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9704 Malicious code in mdx2-csf (npm)

--- -= Per source details. Do not edit below this line.=-...

NIST Cybersecurity Framework (CSF) and CTEM – Better Together

It's been a decade since the National Institute of Standards and Technology NIST introduced its Cybersecurity Framework CSF 1.0. Created following a 2013 Executive Order, NIST was tasked with designing a voluntary cybersecurity framework that would help organizations manage cyber risk, providing...

Breaking it Down: A Data-Centric Security Perspective on NIST Cybersecurity Framework 2.0

On February 26, 2024, NIST released version 2.0 of the Cybersecurity Framework. This blog reviews the fundamental changes introduced in CSF 2.0 and data-centric security considerations that should be made when aligning with the new framework. As cybercriminals become more sophisticated, efficient...

Achieving NIST CSF 2.0 Top Tier Adaptable Status

An Overview of NIST CSF 2.0 The National Institute of Standards and Technology NIST recently updated its popular Cybersecurity Framework CSF to version 2.0 to help organizations reduce cybersecurity risks. Designed for virtually all industry sectors, from small to medium businesses SMBs to larger...