Stryker

Stryker CPU-Z CVE-2017-15303 기반의 다목적 개념 증명 도구 시스템 요구 사항 x64 Windows 7/8/8.1/10; Stryker는 x64 Windows 전용으로 설계되었습니다; 관리자 권한이 필요합니다. 기능 드라이버 서명 강제 적용 무력화기 DSEFix와 유사; 프로세스 객체 수정을 통한 보호된 프로세스 하이재킹; 드라이버 서명 강제 적용 우회를 위한 드라이버 로더 TDL과 유사. 사용법 STRYKER -dse on | off STRYKER -prot ProcessID ProcessID in...

DSE-Patcher

DSE-Patcher https://www.codeproject.com/Articles/5348168/Disable-Driver-Signature-Enforcement-with-DSE-Patc...

edu-recon

edu-recon 教育セクターのレッド/ブルー演習 向けの、認可された偵察＆トリアージオーケストレーター。 ターゲットを投入すると、スキャナーを実行し、ノイズをフィルタリングし、ランク付けされた レビューキューを Web UI で提供します。Linux マシン（Kali / インフラ）にデプロイし、 ブラウザから操作することを想定して構築されています。 ⚠️ 認可された使用のみ。 テストを許可されているシステムにのみ向けてください。 スコープロックはデフォルトでオフ です — 認可の責任はオペレーターにあります。実際の エンゲージメントでは、config.yaml の...

CVE-2026-73318

CVE-2026-73318: Missing authorization on force-agreement actions XenForo before 2.3.13 lets any ACP administrator trigger site-wide privacy-policy and terms re-agreement. What happens The ACP navigation entries are limited to administrators with the option permission, but ForceAgreementController...

aegis-latent-core

Aegis Latent Core AI 거버넌스 및 암호화 증거 게이트웨이 Aegis Latent Core는 모든 거버넌스된 AI 호출에 대해 서명되고 해시로 연결된 증거를 — 응답이 호출자에게 도달하기 전에 — 커밋하며, 게이트웨이, 우리, 또는 당신을 신뢰하지 않고도 제3자가 검증할 수 있는 이식 가능한 증명을 발급합니다. -green 이 파일의 모든 핵심 주장에는 위치 지정자와 명시된 경계가 따르며, 이 규율을 강제하는 게이트는 CI에서 실행됩니다. 현재 릴리스: v5.0.1 — 최신 공개 릴리스체크아웃된 소스는...

cve-2026-20833-rc4-kerberos

CVE-2026-20833 — Kerberos RC4 강화 이 저장소는 Active Directory 환경 에서 Kerberos의 RC4 점진적 폐지 와 관련된 기술 문서 , PowerShell 스크립트 , Power BI 대시보드 , 그리고 공식 Microsoft 참조 자료 를 통합하여 제공합니다. 이는 CVE-2026-20833 을 해결하기 위한 Microsoft의 보안 변경 사항의 일부입니다. 목표는 조직이 다음을 지원하도록 돕는 것입니다: 보안 감사 RC4 사용 탐지 수정 계획 2026년 Kerberos RC4 적용 단...

CVE-2026-34444

CVE-2026-34444 CVE-2026-34444getattr/setattr에서 불완전한 attributefilter 적용으로 인한 샌드박스 탈출 및 RCE...

CVE-2026-82406: Improper Enforcement of Behavioral Workflow

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the native marketplace function core/kapp/market/market.go Buy does not check IsClaimed before accepting a bid. A seller can use the Claim seller-accept branch to settle a resting-bid auction while leaving the...

kontext-cli v1.8.1

Website | Documentation | Dashboard | Discord Stop risky AI-agent actions before they run AI agents do more than suggest code. They run shell commands, read files, call services, change infrastructure, and interact with production systems. Kontext puts local policy between AI agents and the tools...

PT-2026-95845

The deleteContainer opcode 0x14/20 is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the data tree regardless of the ACL restrictions on the znode or its parent. This opcode is considered internal-only and the official clie...

CVE-2026-93854

In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations PUT /v2/leases/leaseid and DELETE /v2/leases/leaseid. The policy authorize wrapper attempts to load the target lease to build the authorization target from its owner...

GHSA-GJW4-3V3V-RQXG Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement

Summary Capsule lets a cluster administrator forbid specific metadata keys that tenant owners must not place on their own resources: Tenant.spec.namespaceOptions.forbiddenLabels / forbiddenAnnotations namespaces, Tenant.spec.serviceOptions.forbiddenLabels / forbiddenAnnotations Services, and the...

CVE-2026-61672

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7 , the ForbiddenListSpec.ExactMatch function in pkg/api/forbidden_list.go sorts denied metadata keys case-insensitively but then calls sort.SearchStrings, which assumes byte-order sorting. When an administrator's...

EUVD-2026-83164

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbiddenlist.go sorts denied metadata keys case-insensitively and then uses sort.SearchStrings, which assumes byte-order sorting. When an administrator's forbidden list...

CVE-2026-85706

Laboratorio de validación de CVE-2026-85706 en GitLab Este directorio construye un laboratorio de GitLab aislado y exclusivamente local para pruebas defensivas autorizadas de CVE-2026-85706. El CVE afecta la API repository-commits de GitLab CE/EE en el confinamiento de rutas y la aplicación de...

EUVD-2026-80252

On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gNMI may fail to correctly enforce the rules in this policy if both a group rule and a user rule fo...

CVE-2026-73439 Security Advisory 0164

On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gNMI may fail to correctly enforce the rules in this policy if both a group rule and a user rule fo...

EUVD-2026-80197

The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether an incoming request is addressed to its own REST API, and does not enforce the permission recorded against an API credential, allowing the holder of a read-only key to act as the administrator account that issued it...

CVE-2026-77360: Improper Neutralization of CRLF Sequences in HTTP Headers

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, the @orpc/server CORS plugin in packages/server/src/plugins/cors.ts copies a client's incoming Vary request header into the response instead of controlling Vary as a response-only...

CVE-2026-86831: Improper Validation of Unsafe Equivalence in Input

Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v1.4.0 might allow an authenticated remote user to bypass NetworkPolicy enforcement on co-located pods in other namespaces via crafted pod and namespace names that produce pod...