phantomstars

phantomstars 自动化检测与追踪GitHub上的虚假互动 一个 JS Labs 项目 — 属于 AI Slop Intelligence 倡议的一部分。 每天运行。给每个可疑账户打分。检测协调性的机器人活动。 直接在受影响的仓库上提交问题，以便维护者采取行动。 支持此项目 BTC 3QjWqhQbHdHgWeYHTpmorP8Pe1wgDjJy54 ETH 0x5851e6145F4773d1585b8686095FB16E368a4dA1 ZEC t1KSR5YkNPbjqRSCoLKo5AddFWdm9Kzxh1B 为什么存在 GitHub...

tricorne

Tricorne オフェンシブセキュリティのためのFedora Remix。 「俺の財宝か？欲しけりゃくれてやる。探せ！この世の全てをそこに置いてきた！」ゴール・D・ロジャー 短い説明 KaliはDebianを、BlackArchはArchを、Parrotは「セキュリティ重視のデスクトップ」というニッチをそれぞれ支配しています。RPM世界のオフェンシブセキュリティを支配しているディストリビューションはありません 。Fedoraはおそらく最も防御的に強化されたメインストリームディストリビューションですが、その上に立つものはありません。Tricorneはそのギャップを埋めます。...

paragon

非推奨のお知らせ このプロジェクトは非推奨となりました。新しい Realm プロジェクト を参照してください。このリポジトリを構築した際の多くのアイデアを基にしています。 Paragon Paragon はレッドチームエンゲージメントプラットフォームです。シンプルな UI の背後で攻撃ツールを統合し、バックエンド作業の多くを抽象化することで、オペレーターはインプラントの作成に集中でき、データベースや CSS に悩む時間を減らすことができます。このリポジトリには、エンゲージメント中に使用できる Paragon に統合された攻撃ツールもいくつか含まれています。...

pentesting_scripts

はじめに このリポジトリには、コンサルタントが業務で役立つ可能性のある、さまざまな侵入テストツールがランダムに含まれています。 変更の提案、機能のリクエスト、コメントなどはお気軽に行ってください。 連絡先情報 Facebook: https://www.facebook.com/vonahisec Twitter: https://www.twitter.com/vonahisec LinkedIn: https://www.linkedin.com/company/vonahisec Instagram: https://www.instagram.com/vonahisec...

The vulnerability of the Microsoft Dynamics 365 Customer Engagement (CE) CRM system, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 Customer Engagement CE CRM system is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

engagement-mgr

Engagement Manager Engagement Manager 是一个用于跟踪攻击性安全项目的 Web 应用程序。它采用现代 UI，基于 Next.js、Prisma 和 PostgreSQL 构建。该应用包含日历、项目、客户、联系人、发现和操作员。 Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 截图 目录 截图 编写发现并生成 PDF 报告 报告安全与部署 验证 先决条件 环境配置 数据库设置 开发 生产 安装 自动化设置（Ubuntu） 加固设置与备份的升级说明 手动设置 运行应用程序...

EUVD-2026-90681

Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete comment likes or dislikes belonging to other users that they are not authorized to delete, resulting in an authorizatio...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all core modules. This...

GitHub Engagement Signals for CVE Prioritization: The GitHub Popularity Metric (GPM)

Whitepaper called GitHub Engagement Signals For CVE Prioritization: The GitHub Popularity Metric GPM...

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2025-13882

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0–6.3.0.2, 6.2.4.0–6.2.4.4, and Standard Edition 6.2.4.0–6.2.4.4 could allow an unauthenticated remote attacker to cause a denial of service in the email service due to improper control of interaction frequency (CWE-799). The CVSS 3...

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

CVE-2025-13882 Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

EUVD-2025-210934

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2025-13882 DESCRIPTION: IBM Sterling Partner Engagement Manager could allow an unauthenticated user to cause a denial of service in the email service due to improper control...

PT-2026-95406

Name of the Vulnerable Software and Affected Versions IBM Sterling Partner Engagement Manager Essentials Edition versions 6.3.0.0 through 6.3.0.2 IBM Sterling Partner Engagement Manager Essentials Edition versions 6.2.4.0 through 6.2.4.4 IBM Sterling Partner Engagement Manager Standard Edition...

CVE-2025-13882: Improper Control of Interaction Frequency

IBM Sterling Partner Engagement Manager Essentials Edition 6.3.0.0 through 6.3.0.2, and 6.2.4.0 through 6.2.4.4 and IBM Sterling Partner Engagement Manager Standard Edition 6.2.4.0 through 6.2.4.4 could allow an unauthenticated user to cause a denial of service in the email service due to imprope...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to ...

The vulnerability of the IBM Sterling Partner Engagement Manager software lies in its lack of measures to protect the website structure. This allows attackers to execute arbitrary JavaScript code and disclose protected information.

The vulnerability of the IBM Sterling Partner Engagement Manager software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and disclose protected information...