RITA-J

RITA Real Intelligence Threat Analytics في Jupyter Notebook RITA هو إطار عمل مفتوح المصدر لتحليل حركة مرور الشبكة برعاية Active Countermeasures RITA-J هو تنفيذ ميزات RITA في Jupyter Notebook. الهدف هو دعم جميع أنواع سجلات جدار الحماية/الوكيل/DNS الموجودة بصيغة CSV أو TSV أو JSON، وتسهيل التحليل...

[SECURITY] Fedora 45 Update: mod_security-2.9.14-2.fc45

ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks...

Malicious Package

Overview live-detection-dashboard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Defense-In-Depth at the Perception-Reasoning Interface of LLM-Centric Agentic UAV Swarms

Large Language Models LLMs increasingly support Uncrewed Aerial Vehicle UAV swarm operations such as data collection scheduling, where the model reads structured sensor reports and decides which sensors to visit. An adversary who quietly manipulates those reports can redirect the swarm without...

wazuh v4.14.9-rc1

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time:- The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop.- The verification key is...

PYSEC-2026-4145 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time: - The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop. - The verification key ...

xss_db

RUBY RUBY는 웹 요청의 공격 가능성을 탐지하고, 위험도와 정책에 따라 대응 전략을 선택해 방어 기법을...

INtrack

INtrack - 인터넷 크롤러 및 보안 스캐너 INtrack은 네트워크 정찰, 취약점 탐지, 보안 평가를 위해 설계된 강력한 멀티스레드 보안 스캐너이자 인터넷 크롤러입니다. 다양한 인스턴스, 취약점, IoT 기기, 노출 항목 등을 스캔할 수 있습니다. 기능 🔍 포괄적 스캔 : 웹 서버, 애플리케이션, 취약한 서비스 등을 탐지 🌐 유연한 대상 선택 : 단일 호스트, 서브넷, 무작위 인터넷 IP 또는 파일의 대상 스캔 🛠️ 다양한 스캐너 유형 : 알려진 CVE에 대한 취약점 스캐너 인스턴스 탐지 WordPress, Jira,...

TomcatScanPro

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含...

CamTRON

CamTRON - Escáner de Cámaras Una herramienta automatizada para detectar dispositivos de vigilancia cámaras en redes. Características Detección multimarca : Compatible con más de 30 marcas de cámaras, incluyendo Hikvision, Dahua, Axis, CCTV y más Escaneo de alto rendimiento : Escaneo concurrente c...

CLEANSTART-2026-UC97457 Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics

Security vulnerability affects the apache-nifi package. The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics...

A Resource-Aware Behavior Reconstruction and Hierarchical Semantic Learning Framework for Host Intrusion Detection

System calls syscalls record key interactions between running programs and the operating system kernel, providing fine-grained and minimally intrusive data for host-based intrusion detection systems HIDS deployed in cloud and other modern computing environments. However, existing methods often...

Out of Sync, out of Sight: Phantom State Attacks against IIoT Intrusion Detection

Machine learning-based intrusion detection systems IDS are critical for securing Industrial Internet of Things IIoT environments. Most adversarial research against them perturbs the feature vector or the traffic that produces it, and depends on gradient access, repeated model queries, or a learne...

Prompted to Discriminate: Generalizing Malicious-Input Probes in the Wild

LLM agents increasingly rely on activation probes as runtime monitors for prompt injection, jailbreaks, and unsafe requests, reading the model's own hidden state to catch a harmful input before the agent acts on it. A cheap, increasingly common move, borrowed from LLM-as-judge prompting, is to...

A Hybrid Approach to Malware Detection: Integrating Few-Shot Model-Agnostic Meta-Learning with Autoencoders

Ransomware has emerged as a major cybersecurity threat, with incidents increasing in frequency and impact across critical sectors. These attacks are typically launched through phishing emails, malicious downloads, or exploitation of software vulnerabilities to gain system access. Once inside, the...

Jev-IDS: System One Models for Network Intrusion Detection

Machine-learning Network Intrusion Detection Systems IDS depend on substantial labeled datasets and task-specific training, whereas Large Language Models LLMs detection can analyze flow records directly but incurs higher inference cost and latency, with less constrained outputs. This paper presen...

MAL-2026-17434 Malicious code in live-detection-dashboard (npm)

live-detection-dashboard is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username,...

Malicious code in live-detection-dashboard (npm)

live-detection-dashboard is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the hostname, username,...

Learning Normal Diffusion Dynamics for Backdoor Defense in Text-To-Image Models

Backdoor attacks pose a serious threat to the secure deployment of text-to-image T2I diffusion models. Existing defenses typically detect backdoors from specific abnormal patterns in internal representations, which may limit their generalizability with the emergence of increasingly diverse attack...