drawio-threatmodeling

Draw.io libraries for threat modeling This is a collection of custom libraries to turn the free and cross-platform Draw.io diagramming application into the perfect tool for threat modeling. Data Flow Diagrams Data Flow Diagramming is a simple diagramming technique used to gain an understanding of...

CVE-2026-82539

CVE-2026-82539 Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Severity CVSS v4.0 Base Score: 9.4 Critical Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P Vulnerability...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 Bomba HTTP/2 Guía completa de reproducción Basado en el aviso de QiAnXin CERT + investigación original de Calif ================================================================ I. Resumen de la vulnerabilidad CVE-2026-49975 es una vulnerabilidad crítica de denegación de servicio Do...

IBM-Security-Verify-oAuth_Token_Steal-CVE-2024-35133

IBM Security Verify Access - Open Redirect during OAuth Flow CVE-2024-35133 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision : 1.0 Impact : By persuading a victim to visit a...

CVE-2024-23700

CVE-2024-23700 - PoC de escalada de privilegios en Android Companion Device Proyecto que ilustra CVE-2024-23700, una vulnerabilidad de escalada de privilegios relacionada con el mecanismo Companion Device en Android. El PoC demuestra que una aplicación puede aprovechar el flujo de vinculación de...

fides

Protegiendo Agentes de IA con Control de Flujo de Información Este repositorio contiene un cuaderno de Jupyter que acompaña al artículo académico «Protegiendo agentes de IA con control de flujo de información». El cuaderno está estructurado como un tutorial para guiar a los lectores a través de l...

cfgrip

cfgrip PE/ELF x86/x64 CFG 提取器。输入一个二进制文件，反汇编它，解析每个跳转和调用（GOT、跳转表、寄存器追踪），并将完整的控制流图导出为结构化 JSON。 为什么 你需要确切知道每个分支的去向——不是为了阅读，而是为了打补丁。将 JSON 输入 Zydis 或 AsmJit，定位你需要挂钩或修改的确切指令，然后写回。反作弊团队用它来映射游戏二进制文件；逆向人员用它来将代码提取到自己的分析管线中；软件分析师在不运行二进制文件的情况下追踪执行路径。 cfgrip 提供地图。怎么用取决于你。 它提取什么 对于每个 cfgrip 处理的二进制文件，它会生成： 函数列表...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Obfuscate & Virtualize PowerShell Code PowerShell Pro Obfuscator protects proprietary .ps1 scripts with renaming, polymorphic string and integer encryption, control-flow flattening, finite-state automata FSA, a VM engine, self-defending integrity checks, a protection...

CVE-2025-34157

XSS almacenado en el flujo de eliminación de Coolify CVE-2025-34157 Afecta: Coolify ≤ v4.0.0-beta.420.6 Corregido en: v4.0.0-beta.420.7 Severidad: Crítica 9.4 Vector CVSS 4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE: CWE-79 Cross-Site Scripting, CWE-20 Validación de...

EUVD-2026-87698

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

CVE-2026-100570

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570

The OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

EUVD-2026-87481

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100570 OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS

OpenClaw npm package 'openclaw' versions = 2026.3.28 and 2026.8.1 allow an untrusted workspace .env file to set the CLOUDSDKPYTHONARGS environment variable. When an operator starts OpenClaw in attacker-controlled workspace content and then runs the Gmail setup flow, that value is inherited when...

CVE-2026-100603: Improper Control of Interaction Frequency

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

gha-lab-61c59f4acb

Artefacto de investigación automatizado — no es el proyecto original. Este repositorio es un laboratorio desechable construido por un sistema automatizado para una tesis de maestría en Université Laval sobre la reproducción de vulnerabilidades publicadas en flujos de trabajo de GitHub Actions. Es...

REpsych

REpsych : Guerra psicológica en la ingeniería inversa github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Descripción general El conjunto de herramientas REpsych es una prueba de concepto que ilustra la generación de imágenes a través del grafo de control de flujo CFG de un programa. Un CFG...

REpsych

REpsych : Guerra psicológica en la ingeniería inversa github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Resumen El conjunto de herramientas REpsych es una prueba de concepto que ilustra la generación de imágenes a través del grafo de control de flujo CFG de un programa. CFG de una función...

CVE-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm Status: validated crash PoC with demonstrated control-flow hijack crashpc = freed-cell poison 0xcdcdcdcdcdcdcdcd under the debug shell — the engine jumps to a pointer read out of the freed ICScript. Remaining work: control the reclaimed bytes. See research/README.md. ...