389 matches found
Pesidious
Mutation de logiciels malveillants par apprentissage par renforcement profond et GANs Le but de cet outil est d'utiliser l'intelligence artificielle pour muter un échantillon de logiciel malveillant PE32 uniquement afin de contourner les classifieurs basés sur l'IA tout en conservant ses...
SANS_THIR16
SANSTHIR16 SANS: सस्ते में हंटिंग DGA क्लासिफायर RandomForest डोमेन फीचर्स जैसे voweltoconsonantratio, longestconsonantsequence, शब्दकोश और alexa top domains से ngrams का उपयोग करता है। ROC वक्र...
MADLIRA
MADLIRA Rilevamento di malware tramite apprendimento e information retrieval per Android Panoramica MADLIRA è uno strumento per il rilevamento di malware Android. È composto da due componenti: il componente TFIDF e il componente di apprendimento SVM. In generale, prende in input un insieme di...
WAF-A-MoLE
WAF-A-MoLE Un fuzzer guidato basato su mutazioni per Web Application Firewall basati su Machine Learning, ispirato ad AFL e basato sul FuzzingBook di Andreas Zeller e collaboratori. Data una query di SQL injection come input, tenta di produrre una query semanticamente invariante in grado di...
dga_predict
Prevedere gli algoritmi di generazione di domini utilizzando le LSTM Questa repository contiene un codice molto semplice per classificare i domini come DGA o benigni. Questo codice dimostra i nostri risultati nel nostro articolo arXiv qui: https://arxiv.org/abs/1611.00791. Una differenza riguarda...
ache
Crawler Focalizzato ACHE ACHE è un web crawler focalizzato. Raccolgie pagine web che soddisfano criteri specifici, ad esempio pagine che appartengono a un dato dominio o che contengono un pattern definito dall'utente. ACHE si differenzia dai crawler generici in quanto utilizza classificatori di...
CVE-2026-68138
CVE-2026-68138: Race nella rate-table qdisc di Linux per la root locale Questo repository contiene un proof-of-concept di elevazione dei privilegi locali per CVE-2026-68138 , una race condition nel codice delle rate-table del traffic-control di Linux. Nell'ambiente QEMU testato, il PoC eleva i...
bordair-detector
Bordair Detector Un rilevatore a due stadi per tentativi di prompt injection e jailbreak negli input LLM. Un gate regex smista la maggioranza facile del traffico senza toccare il modello; tutto ciò che è ambiguo passa a un classificatore DeBERTa-v3 quantizzato che gira in ONNX. Lo stesso motore...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: Protect flwalk with rcu. The patch that refactored flwalk to use idrforeachentrycontinueul also removed the rcu protection for individual filters. This caused a use-after-free when the filter was deleted...
ayaFlow
ayaFlow ayaFlow ist ein Netzwerkverkehrsanalysator in Rust + eBPF, erstellt mit Aya. Es führt einen Agenten pro Linux-Knoten aus, bindet einen TC-Klassifikator am Eingang und Ausgang und stellt Live-Verkehrsdaten, historische, SQLite-gestützte Verläufe und Prometheus-Metriken zur Verfügung. Was e...
spamscanner
Spam Scanner is the best anti-spam, email filtering, and service...
ThreatDetect
ThreatDetect ThreatDetect è un prototipo di rilevamento delle minacce interne basato su Streamlit che analizza i dati delle attività dei dipendenti e segnala comportamenti potenzialmente rischiosi. Utilizza un classificatore XGBoost addestrato insieme a un rilevatore di anomalie Isolation Forest...
CVE-2026-74700
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...
CVE-2026-74700 net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Always acquire rtnllock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tcnewtfilter where a tcfproto can be found and briefly referenced by a totally...
PT-2026-79705
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls api: Always acquire rtnl lock when destroying locked classifiers Another challenge with unlocked filters. There is a short window in tc new tfilter where a tcf proto can be found and briefly referenced by a totally...
PT-2026-79404
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls route: fix fastmap use-after-free on filter The route4 classifier maintains a 16-slot fastmap cache that stores raw struct route4 filter pointers indexed by id, iif. The reader route4 classify populates this cache...
CVE-2026-74544
The CVE-2026-74544 issue is in the Linux kernel net/sched cls_u32 implementation. u32_change() copies offshift (unsigned char, 0-255) without bounds checks, enabling undefined behavior (shift-out-of-bounds) in u32_classify() when TC_U32_VAROFFSET is set and offshift ≥ 32. Public sources (Linux ke...
CVE-2026-72338 net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload
In the Linux kernel, the following vulnerability has been resolved: net/sched: actpedit: fix TOCTOU heap OOB write in tc offload There is a TOCTOU race condition in flower lockless approach between sizing a flowrule buffer and filling it. [email protected] reports: The clsflower...
PT-2026-72726
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls flow: Dont expose folded kernel pointers The flow classifier falls back to addr fold for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can...
kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle
A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...