FML-Network

FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Paper: FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Dataset: FLNET2023 Introduction FLNET2023 is a state-of-the-art benchmark dataset for intrusion detection systems, specifically fo...

anomaly-flow

Anomaly-Flow Framework for implementing Intrusion Detection Systems NIDS aimed at identifying anomalies in network flows using Machine Learning models. Reference paper: Anomaly-Flow: A Multi-domain Federated Generative Adversarial Network for Distributed Denial-of-Service Detection Create the...

Mandiant-Azure-AD-Investigator

Mandiant Azure AD Investigator Focusing on UNC2452 TTPs Overview This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity. Some indicators are "high-fidelity" indicators of compromise, while other artifacts are so calle...

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connectopenid-connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or...

pvbrf-id

PVBRF-ID: Private, Verifiable and Byzantine-Robust Federated Intrusion Detection for Oilfield Enterprise Networks Simulation code, raw results and figure scripts for the paper Mustafa S. Aljumaily, Ali Ataeemh Allami, Mustafa N. Mnati, Nawar S. Alseelawi, Shahab Abdulla, "PVBRF-ID: Private,...

nextcloud-federated-ocm-token

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-federated-ocm-token Write-up: https://abraxaslabs.tech/research/nextcloud-federated-ocm-token nextcloud-federated-ocm-token Nextcloud Server 35.0.0 - Nextcloud GmbH A federated share secret is minted as an...

CVE-2026-63115

ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the Undo handler allows a remote federated server to cause the service to act on a follow or repost as though the activity came from a different account. This permits removal of an existing foll...

CVE-2026-63115

The ActivityPub server (versions 1.0.0 through 1.2.6), a multi-tenant ActivityPub server for Ghost built with Fedify, contains a vulnerability in the Undo handler . This flaw allows a remote federated server to trigger actions as if they originated from a different account, enabling the unfollow ...

CVE-2026-63115 ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts

ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the Undo handler allows a remote federated server to cause the service to act on a follow or repost as though the activity came from a different account. This permits removal of an existing foll...

CVE-2026-77167

A flaw was found in Nextcloud. An unauthenticated remote attacker can abuse the federated sharing endpoint to inject arbitrary rows into the database. Because these entries are never automatically cleaned up, they cause persistent Denial of Service DoS conditions that disrupt system availability...

CVE-2026-77167

Abusing the federated share endpoint, an attacker can write arbitrary rows into the ocshareexternal database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions follow from this write primitive, all triggered from the same...

EUVD-2026-111127

Abusing the federated share endpoint, an attacker can write arbitrary rows into the ocshareexternal database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions follow from this write primitive, all triggered from the same...

CVE-2026-77167

Abusing the federated share endpoint, an attacker can write arbitrary rows into the ocshareexternal database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions follow from this write primitive, all triggered from the same...

CVE-2026-77167

A vulnerability in Nextcloud allows an unauthenticated attacker to abuse the federated share endpoint to write arbitrary rows into the oc_share_external database table. Because there is no automatic cleanup mechanism, these injected rows persist indefinitely. This write primitive enables an attac...

CVE-2026-77167: Uncontrolled Resource Consumption

Abusing the federated share endpoint, an attacker can write arbitrary rows into the ocshareexternal database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions follow from this write primitive, all triggered from the same...

PT-2026-126668

Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc share external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions follow from this write primitive, all triggered from the sam...

Nextcloud Server resource management error vulnerability

A resource management error vulnerability exists in Nextcloud Server versions 22.0.0 through 34.0.0. This vulnerability arises because the federated sharing endpoint can write arbitrary rows to the ocshareexternal database table without any automatic cleanup mechanism, potentially leading to a...

Security Bulletin: Security vulnerabilities have been found in Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)

Summary DB2 is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about security vulnerabilities affecting DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...

EUVD-2026-107654

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the editfederatedproviders capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches fr...

CVE-2026-76297

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the editfederatedproviders capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches fr...