bleah

This repository is DEPRECATED, please usebettercap as this tool has been ported to its BLE modules...

FreeMOCA

FreeMOCA: マルウェアコード解析のためのメモリフリー継続学習 ArXiv論文リンク Zahra Asadi, Haeseung Jeon, Sohyun Han, Md Mahmuduzzaman Kamol, Se Eun Oh, Mohammad Saidur Rahman† 同等に貢献した著者。 †責任著者。 !NOTE 本リポジトリは、論文 FreeMOCA: Memory-Free Continual Learning for Malicious Code Analysis の公式実装です。 FreeMOCAのパイプライン FreeMOCAは以下のプロセスで動作します。...

cov-int

XWiki Commons XWiki Commons は、他のいくつかのトップレベル XWiki プロジェクトに共通する技術ライブラリ群です。 これらのライブラリは XWiki エコシステム外のプロジェクトでも利用でき、汎用的であり、ウィキ領域には関連しません。 XWiki Platform、XWiki Commons、XWiki Rendering は、XWiki.org ソフトウェアフォージの一部です。これらは一緒にリリースされ、同じバージョンを共有しています。 ドキュメント ドキュメント API 開発ゾーン ダウンロード XWiki Commons の JAR は、 で入手できま...

sentrygrid

SentryGrid ML駆動の脅威検知・継続的モニタリングを備えた、連邦政府のゼロトラスト アーキテクチャ向けに構築されたプラットフォーム。OSCALネイティブ、FedRAMP Moderate準拠、ハッシュチェーン監査、3モデル異常検知アンサンブル。 クイックスタート root@kitploit: make setup install bun + python deps make dev-up bring up the local stack via docker compose make dev turbo dev across workspaces make smoke...

CVE-2026-55060

GoCD , a continuous delivery server, has an authorization bypass in the /go/api/support/process_list endpoint from versions 13.1.0 through 26.1.0 . The endpoint does not enforce its intended administrator-only authorization, allowing an authenticated internal user to view command-line arguments, ...

EUVD-2026-83948

GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials when rendering the Stage Detail, Job/Build Detail, Value Stream Map, and Pipeline...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

ARES

ARES™ Autonomous Red Team Engagement & Continuous Security Validation Platform The open-core platform empowering enterprise red teams, MSSPs, and security operations centers to execute targeted offensive engagements, discover deterministic attack paths, and continuously validate defensive posture...

Astra Linux – Vulnerability in ORC

A stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked into processing a specially crafted file using the affected ORC compiler, arbitrary code may be executed on the developer’s build environment. This may lead to compromise of...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereferencing in v3djobupdatestats The following kernel error was recently reported by Mesa CI: 800.139824 Unable to handle NULL pointer dereferencing at virtual address 0000000000000588 800.148619...

CVE-2026-87063

A flaw was found in konflux-operator-tasks. The Continuous Integration CI process installs the tkn command-line interface CLI from a network download without verifying its integrity through checksums or digital signatures. This vulnerability could allow a compromised distribution channel to...

4 Questions to Ask When Evaluating an Exposure Management Platform

Executive Summary Exposure management platforms are increasingly evaluated based on post-detection actions rather than detection itself. This piece sets out four questions to ask when evaluating one: whether it narrows vulnerabilities to the exploitable using environment context rather than...

CVE-2026-14297: Out-of-bounds Write

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service CGMS Record Access Control Point RACP write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. The exploitable impact cannot be predetermined - it is entirely dependent on...

継続的脆弱性評価の導入：AI脅威時代に向けたリアルタイム防御

Wiz CVA を使用して、新しい脆弱性が公開された瞬間にその露出を検出します...

CVE-2026-18252

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...

CVE-2026-65976 Deskflow: Clipboard receiver can accumulate data beyond Deskflow's configured clipboard size limit

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy16.cpp or client path in...

CVE-2026-65976

Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.300, a connected peer can send repeated DCLP DataChunk messages to ClipboardChunk::assemble in src/lib/deskflow/ClipboardChunk.cpp, causing the server path in src/lib/server/ClientProxy16.cpp or client path in...

Linux Distros Unpatched Vulnerability : CVE-2026-8400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Jav...

CVE-2026-67434 PHP_CodeSniffer gitblame report command injection via crafted filename

PHPCodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHPCodeSniffer contains a command injection vulnerability in the code that generates the Gitblame, Hgblame, and Svnblame report formats. As a result, running...

Malicious code in lib-frontsga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a65c44cfdcbc89df47508f3f87fcab836f1fa2f4adf2298ecfb47cd6088038 Package name 'lib-frontsga' published to the public npm registry at version 9.999.999 targets an internal package name via dependency-confusion...