448 matches found
Multimodal-web-attack-Dataset
MWAD: Un conjunto de datos multimodal de ataques web para la detección de inyección SQL basada en IA Descripción general El conjunto de datos multimodal de ataques web MWAD es un novedoso conjunto de datos etiquetado de ciberseguridad desarrollado como parte de la investigación del autor en...
TokenFlare
TokenFlare Framework serverless de simulación de phishing AITM para Entra ID / M365 Características Ligero: La lógica principal en src/worker.js solo 530 líneas de JavaScript. Modular: Soporta varios flujos OAuth, con soporte para bypass de Conditional Access de Intune incluido de serie. Fácil de...
AzureRedOps
AzureRedOps Una herramienta navaja suiza para red teaming en Azure / Entra ID. Autor: Mr.Un1k0d3r TrueCyber Inc Versión: 0.1 Lenguaje: Python 3.12+ Resumen AzureRedOps es un conjunto de herramientas de seguridad ofensiva para evaluar la postura de seguridad de los inquilinos de Microsoft Entra ID...
power-pwn
Mantenido por: Asegura agentes de IA en todas partes. Descripción general Power Pwn es un conjunto de herramientas de seguridad ofensiva y defensiva para Microsoft 365 Power Platform y los servicios de IA. Características clave, entre otras: 💾 PowerDump : Escaneo integral del tenant y recopilació...
anomaly-flow
Anomaly-Flow Marco de trabajo para implementar Sistemas de Detección de Intrusiones NIDS orientados a identificar anomalías en flujos de red utilizando modelos de Aprendizaje Automático. Artículo de referencia: Anomaly-Flow: Una Red Generativa Adversarial Federada Multi-dominio para la Detección ...
kestrel-lang
.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Kestrel威胁狩猎语言 |readthedocs| |pypi| |downloads| |codecoverage| |black| | 使用原生查询/脚本（左）还是Kestrel（右）进行狩猎？ 一次端到端的网络威胁狩猎通常需要在多个数据源/环境中执行，并在狩猎流程中的任意位置进行 enrichment/ML/可视化步骤。 .. image::...
Important: Red Hat Security Advisory: Network Observability 1.12.3 for OpenShift
Network Observability 1.12 for Red Hat OpenShift. Network flows collector and monitoring solution...
CVE-2026-63446 Suricata app-layer: passed flows can retain transactions, causing resource exhaustion
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId in src/app-layer-parser.c uses an inverted guard and marks only already-inspected transactions as inspected. On flows...
CVE-2026-63446 Suricata app-layer: passed flows can retain transactions, causing resource exhaustion
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId in src/app-layer-parser.c uses an inverted guard and marks only already-inspected transactions as inspected. On flows...
CVE-2026-63446
Suricata (OISF) versions 8.0.0 through 8.0.6 are affected by a resource exhaustion flaw in the application-layer parser. The function AppLayerParserSetTransactionInspectId() in src/app-layer-parser.c uses an inverted guard , marking only already-inspected transactions as inspected. On flows match...
CVE-2026-63448 Suricata smb: some SMB flows can cause resource exhaustion
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, becaus...
CVE-2026-63448 Suricata smb: some SMB flows can cause resource exhaustion
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, becaus...
CVE-2026-59969: Improper Validation of Certificate with Host Mismatch
Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted pe...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Handling of errors when calling otx2mboxgetrsp in otx2flows.c has been improved. A check for the error pointer was added after calling otx2mboxgetrsp...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: avoid stalls in fqpietimer When setting a high number of flows limit being 65536, fqpietimer is currently using too much time as syzbot reported. Add logic to yield the cpu every 2048 flows less than 150 usec on...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: sched: schcake: Fixed the logic for accounting bulk flows in order to ensure host fairness. In schcake, we keep track of the number of active bulk flows per host. This is done when running in the dst/src host fairness mode, which...
EUVD-2026-75781
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...
axios: Axios: Information disclosure of proxy credentials via redirect flows
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...
