columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

anubis

Anubis root@kitploit: d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis is...

digital-forensics-lab

デジタルフォレンジックスラボ & 共有サイバーフォレンジックインテリジェンスリポジトリ リポジトリの特徴 インタラクティブなデジタルフォレンジックスラボ: 学生と教員の関与に特化 Linux中心のラボ環境: すべてのラボでKali Linuxのみを使用 視覚的学習サポート: 各ラボにはPowerPointプレゼンテーション、関連ファイル、指導用スクリーンショットが含まれます 包括的なカバレッジ: デジタルフォレンジックス分野の幅広いトピックを網羅 オープンソースツール: 使用するすべてのツールは無料で入手可能なオープンソースです 継続的なアップデート:...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

Security-Datasets

セキュリティデータセット Security Datasets プロジェクトは、オープンソースの取り組みであり、さまざまなプラットフォームからの悪意のあるデータセットと良性のデータセットを情報セキュリティコミュニティに提供し、データ分析と脅威調査を促進します。 ドキュメント https://securitydatasets.com 目標 データ分析の開発を促進するためのオープンでポータブルなデータセットを提供する。 攻撃手法のシミュレーションを容易にし、促進する。 世界中のセキュリティアナリストが実際のデータでスキルをテストできるようにする。...

network-threats-taxonomy

ネットワーク脅威とツールの分類法...

awesome-TS-anomaly-detection

awesome-TS-anomaly-detection 用于时间序列数据异常检测 的工具和数据集列表。 所有列表均按字母顺序排列。在列表中，已维护的项目优先于未维护的项目。 如果最新提交超过 1 年，或作者明确说明，则该仓库被视为“未维护”。 🎓 如果您觉得这个合集有用并想引用它，请遵循引用政策。 异常检测软件 名称| 语言| 简介| 许可证| 维护状态 ---|---|---|---|--- Cuebook 的 CueObserve| Python3| 对 SQL 数据仓库和数据库进行异常检测。| Apache-2.0| ✔️ Yahoo 的 EGADS| Java| GADS...

CVE-2024-52375

WordPress Datasets Manager 💥 漏洞利用作者：Nxploit Khaled Alenazi 📅 CVE 发布时间：2024 年 11 月 14 日 🧠 CVSS 评分：10.0（严重） 🛠 CWE-434：危险类型文件的不受限制上传 📌 描述 在 Arttia Creative 的 Datasets Manager WordPress 插件中发现了一个严重漏洞，影响 直至并包括 1.5 的所有版本。 该插件在上传过程中未能正确验证文件类型，允许未经认证的攻击者上传任意文件（包括 PHP shells），从而实现远程代码执行（RCE） 。 🧠 CVE 详情 CVE...

CVE-2026-35492

CVE-2026-35492 CVE-2026-35492（PartitionedDataset 中的路径遍历漏洞允许任意文件写入） 影响 kedro-datasets 中的 PartitionedDataset 存在路径遍历漏洞。分区 ID 未经验证直接与数据集基础路径拼接。包含 .. 组件的分区 ID 可能被攻击者或恶意输入利用，导致文件被写入配置的数据集目录之外，从而可能覆盖文件系统上的任意文件。 使用任何存储后端（本地文件系统、S3、GCS 等）的 PartitionedDataset 用户均受影响。 补丁 该漏洞已在 kedro-datasets 9.3.0 版本中修复。...

CVE-2026-66007

A flaw was found in datasets. This path traversal vulnerability allows a remote attacker to read arbitrary local files. By providing specially crafted file names in the metadata, an attacker can trick the system into including sensitive local files when datasets are saved or published, leading to...

PYSEC-2026-3629 Keras: HDF5 virtual datasets can disclose local files

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...

Keras: HDF5 virtual datasets can disclose local files

Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...

DEBIAN-CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

CVE-2026-19023 HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

CVE-2026-14538 BigQuery Dataset Allowlist Bypass via Metadata Dry-Run in MCP Toolbox

An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authenticated attacker to bypass allowedDatasets validation checks. The toolbox relies on the BigQuery dry-run API to enfor...

EUVD-2026-51372

An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows an authenticated attacker to bypass allowedDatasets validation checks. The toolbox relies on the BigQuery dry-run API to enfor...

Open Security Benchmark: Towards Autonomous Enterprise Cyber Defense

Enterprises are moving toward autonomous cyber defense: agentic AI that builds situational awareness of an organization's security state and reasons from it to assessments, decisions, and actions. This rests on a holistic view of the enterprise's security state, the continuous, cross-vendor pictu...

CVE-2026-65010

A flaw was found in Hugging Face Datasets through 5.00 in Extractor.extract. When archive contents are extracted to predictable output paths, the extractor follows pre-planted symlinks instead of confining writes to the intended directory. A local attacker who can place those symlinks can redirec...

CVE-2026-66007

CVE-2026-66007 affects HuggingFace Datasets (datasets) up to version 5.0.0. A path traversal vulnerability exists in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Crafting file_name values with directory tr...

CVE-2026-66007 Datasets Path Traversal via Unsanitized file_name Metadata

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the filename metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted filename values with directory traversal...