pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

Grafiki

Grafiki Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was no...

grap

grap: define and match graph patterns within binaries https://github.com/QuoSecGmbH/grap grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with...

lykan

lykan Lykan is a leak analysis program written in C that generates visual graphs of the analysed data. It receives as inputs raw password text dumps where the passwords are separated by '\n' and extracts statistical information about the dumps, including the top passwords, character popularity et...

PcapViz

PcapViz PcapVizは、tcpcapやその他のキャプチャソフトウェアを使用してネットワークデバイスからキャプチャされたpcapファイル内のパケット情報を使用して、ネットワークをデバイストポロジおよび情報フローとして描画します。キャプチャされたパケットを、3つの「レイヤー」のいずれかでフィルタリングし、オプションで表示します。これらは以下の通りです。 デバイスレベルのトラフィックトポロジ、 IP通信、 TCP/UDP通信...

MATE

MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...

amlsec

AutomationMLベースのエンジニアリングデータを用いたサイバーフィジカル生産システムにおける自動化されたセキュリティリスク特定 このプロトタイプは、以下の2つの発表論文で提示された手法を実装しています。 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. AutomationMLベースのエンジニアリングデータを用いた自動化されたセキュリティリスク特定. IEEE Transactions on Dependable and Secure Computing. 2. Eckhart, M., Ekelhart, A., Biffl...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

diaphora

δiaphora Installazione Installa con il gestore plugin Hex-Rays: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Le istruzioni di installazione manuale sono riportate di seguito. Diaphora διαφορά, greco per 'differenza' versione 3.4 è il più...

CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

CVE-2026-32127 - SQL-Injection-Schwachstelle in OpenEMR 8.0.0 Schwachstelle CWE-89 Unsachgemäße Neutralisierung spezieller Elemente, die in einem SQL-Befehl verwendet werden 'SQL Injection' Das Produkt erstellt eine SQL-Anweisung ganz oder teilweise unter Verwendung extern beeinflusster Eingaben...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

recon

Il progetto è stato spostato su monorepo. Vedi https://github.com/pownjs/pown per maggiori informazioni. Recon Recon è un framework di ricognizione di target basato su grafi di conoscenza. Usare grafi di conoscenza invece di rappresentazioni tabellari piatte rende più facile trovare le relazioni...

ProHunter

📋 Übersicht Dieses Projekt ist ein Kernmodul des ProHunter-Systems, das hauptsächlich dazu dient, bösartige Bewertungen von Bedrohungsgraphen durchzuführen, die aus dem PPG-Modul entnommen wurden. Die Hauptidee dieser Methode besteht darin, ungenaues Graphvektor-Matching zu verwenden, um die...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2026-40345 deepmerge-ts: Stack exhaustion when merging recursive object graphs

deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively merging records. When two input values...

CVE-2026-67189

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...

CVE-2026-67189 pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record

pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...

CVE-2026-67189

pfSense Plus before 26.07 and CE through 2.8.1 render PTR records as unsanitized HTML in Traffic Graphs AJAX responses. An attacker controlling a PTR record who appears as a top talker can execute arbitrary JavaScript in an admin's browser, enabling session hijacking and OS command execution. Fix...

[SECURITY] Fedora 44 Update: polymake-4.15-11.fc44

Polymake is a tool to study the combinatorics and the geometry of convex polytopes and polyhedra. It is also capable of dealing with simplicial complexes, matroids, polyhedral fans, graphs, tropical objects, and so forth. Polymake can use various computational packages if they are installed. Thos...

CVE-2026-61498

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gengraphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key, or format HTTP GET parameters. Attacke...