596 matches found
Holmes: An Evidence-Grounded LLM Agent for Auditable DDoS Investigation in Cloud Networks
Cloud environments face frequent DDoS threats due to centralized resources and broad attack surfaces. Modern cloud-native DDoS attacks further evolve rapidly and often blend multi-vector strategies, creating an operational dilemma: defenders need wire-speed monitoring while also requiring...
CVE-2023-7334
Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...
CVE-2023-7334 Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE
Changjetong T+ versions up to and including 16.x contain a .NET deserialization vulnerability in an AjaxPro endpoint that can lead to remote code execution. A remote attacker can send a crafted request to /tplus/ajaxpro/Ufida.T.CodeBehind.PriorityLevel,AppCode.ashx?method=GetStoreWarehouseByStore...
CVE-2025-36934
creationtimestamp| type| source ---|---|--- 2026-01-14 16:59:00+00:00| seen| https://projectzero.google/2026/01/pixel-0-click-part-1.html 2026-01-14 17:01:00+00:00| seen| https://projectzero.google/2026/01/pixel-0-click-part-3.html 2026-01-15 18:57:32+00:00| seen|...
CVE-2026-0822
creationtimestamp| type| source ---|---|--- 2026-01-10 15:00:50+00:00| published-proof-of-concept| Telegram/51hy6eeB0OX5Oi4WYV6NJVEVeitRj2FXamGCe71U1ruORGw 2026-01-10 17:44:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc3kswznff2e...
Cybersecurity Predictions 2026: The Hype We Can Ignore (And the Risks We Can't)
As organizations plan for 2026, cybersecurity predictions are everywhere. Yet many strategies are still shaped by headlines and speculation rather than evidence. The real challenge isn't a lack of forecasts—it's identifying which predictions reflect real, emerging risks and which can safely be...
CVE-2025-14110
creationtimestamp| type| source ---|---|--- 2026-01-07 11:22:38+00:00| seen| https://gist.github.com/Darkcrai86/4a0534d4c587c81eecba37535b29d41c...
CVE-2026-0625 D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint
Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, an attacker can modify the device’s DN...
Integrating Multi-Agent Simulation, Behavioral Forensics, and Trust-Aware Machine Learning for Adaptive Insider Threat Detection
We present a hybrid framework for adaptive insider-threat detection that tightly integrates multi-agent simulation MAS, layered Security Information and Event Management SIEM correlation, behavioral and communication forensics, trust-aware machine learning, and Theory-of-Mind ToM reasoning...
GHSA-5J4H-4F72-QPM6 Bagisto has Normal & Blind SSTI from low-privilege user when ordering product
Summary SSTI when normal customer orders any product in add address step can inject value run in admin view. Details As normal user 1. Go to http://127.0.0.1:8000/ 2. Add order to cart and continue to checkout 3. In step of add address inject this value 77 in any input As admin 1. Go to...
VAPT-Task-3-PTES
VAPT Task-3 – Advanced Exploitation & PTES Report 👤 Author...
CVE-2025-15219
creationtimestamp| type| source ---|---|--- 2025-12-30 04:34:01+00:00| seen| https://bsky.app/profile/potato.software/post/3mb6jja2qud22 2025-12-30 08:32:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb6wueeqju2c...
Exploit for CVE-2025-14847
Eric Capuano^1 posted an excellent blog regarding Mongo...
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as recently as late 2025, according to new findings from TRM Labs. The blockchain intelligence firm said...
ReGAIN: Retrieval-Grounded AI Framework for Network Traffic Analysis
Modern networks generate vast, heterogeneous traffic that must be continuously analyzed for security and performance. Traditional network traffic analysis systems, whether rule-based or machine learning-driven, often suffer from high false positives and lack interpretability, limiting analyst...
CVE-2025-60050
creationtimestamp| type| source ---|---|--- 2025-12-18 09:54:15+00:00| seen| https://gist.github.com/Darkcrai86/52023ebf4cfbde503e7048b4085f0f7e...
CVE-2025-64669
creationtimestamp| type| source ---|---|--- 2025-12-12 13:50:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa7ooc2d24 2025-12-17 15:12:07+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3ma6x4aoh5o2m 2025-12-17 22:27:38+00:00| seen|...
📄 dotCMS 24.04.24 Vulnerability Scanner
dotCMS version 24.04.24 advanced exploitation python scanning script that looks for local file inclusion, data exposure, SQL injection, and more. ============================================================================================================================================= | Title :...