EUVD-2026-79208

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

wireless-ids

Wireless IDS 入侵检测系统 Wireless IDS 是一款用 Python 编写的开源工具，可在 Linux 环境下运行。该工具会嗅探您周围的无线流量，以检测可疑活动，例如 WEP/WPA/WPS 攻击数据包。它可以执行以下操作： 检测发送到客户端/接入点的大量取消认证帧，数量异常可能表明存在针对握手过程的 WPA 攻击。 使用广播 MAC 地址持续向接入点发送数据，可能表明存在 WEP 攻击。 无线客户端与接入点之间使用 EAP 认证进行异常频繁的通信，可能表明存在 Reaver / WPSCrack 发起的 WPS 暴力破解攻击。...

Intrusion-Alert-Educational-Network-IDS

🛡️ 入侵警报-教育型网络入侵检测系统 一个使用 Python 构建的轻量级入侵检测系统（IDS），用于监控网络流量，并根据每个 IP 的请求速率检测潜在的 DoS/DDoS 攻击。 📌 功能特点 📡 使用 Scapy 进行实时数据包嗅探 📊 跟踪每个 IP 地址的请求数 🚨 检测潜在的 DoS/DDoS 攻击 🪟 使用 Tkinter 的图形界面告警系统 ⚡ 多线程以提高性能 🧠 工作原理 1. 该脚本监听所有传入的 IP 数据包。 2. 跟踪每个数据包的源 IP。 3. 按秒对请求进行计数。 4. 如果某个 IP 超过阈值（默认：每秒 100 个请求），则会触发告警。 ⚙️ 环境要求...

FlowGuard: Flow Matching for Identity-Independent Detection of Data-Free Model Stealing Attacks on Energy System Intrusion Detection Systems

Artificial Intelligence AI-based Intrusion Detection Systems IDS deployed in energy infrastructure are vulnerable to model theft attacks, which allow adversaries to create evasive traffic offline. Current defences against model extraction rely either on identity-bound query monitoring, which is...

Stabilising Explainability Fragility in Cybersecurity AI: The Impact and Mitigation of Multicollinearity in Public Benchmark Datasets

This paper investigates a unexplored yet impactful vulnerability in AI explainability used in intrusion detection IDS: multicollinearity-induced instability. Despite extensive reliance on post-hoc explainability tools such as SHAP or LIME, the impact of correlated features on explanation robustne...

On-Device Interpretable Tsetlin Machine-Based Intrusion Detection for Secure IoMT

The rapid evolution of digital health technologies is redefining healthcare services worldwide. The integration of wireless communication and Internet-enabled medical devices within Internet of Medical Things IoMT networks enables continuous, real-time patient monitoring. However, this increased...

Zero Day Attacks: Novel Behaviour or Novel Vulnerability?

Zero-day attacks pose severe cybersecurity risks due to their high success rates and stealth. Because signature-based approaches struggle to detect such attacks, building Intrusion Detection Systems IDSs for detecting zero-day attacks is essential. We contend that for an IDS to be effective it mu...

FIRCE: A Framework for Intrusion Response and Conformal Evaluation

Machine learning-based intrusion detection systems deployed in real-world environments frequently suffer from model degradation due to concept drift, where changes in traffic patterns invalidate training assumptions. To address this, we present FIRCE, a Framework for Intrusion Response and...

simple-ids

Simple IDS - Intrusion Detection System !License: MIThttp...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Attacker Lab: CVE-2017-5638 & CVE-2021-41773 A 7-host Docker-...

CVE-2026-31933

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A remote attacker can exploit this vulnerability by sending specially crafted network traffic. This can cause Suricata to slow down significantly,...

CVE-2026-31937

Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15...

UBUNTU-CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

EUVD-2026-18241

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

CVE-2026-31933

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4...

CVE-2026-31933

Suricata (network IDS/IPS/NSM) is affected by CVE-2026-31933 due to a quadratic/slowdown condition triggered by specially crafted traffic in IDS mode. The issue impacts versions prior to 7.0.15 and 8.0.4, and has been patched in 7.0.15 and 8.0.4. The vulnerability stems from the stream inspection...

Suricata 安全漏洞

Suricata is a network IDS, IPS, and NSM engine developed by the Open Information Security Foundation. Vulnerabilities existed in versions prior to Suricata 7.0.15 and 8.0.4. These vulnerabilities were caused by specially crafted traffic, which could slow down Suricata’s operation in IDS mode,...

UBUNTU-CVE-2026-22263

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available...

Knowledge-To-Data: LLM-Driven Synthesis of Structured Network Traffic for Testbed-Free IDS Evaluation

Realistic, large-scale, and well-labeled cybersecurity datasets are essential for training and evaluating Intrusion Detection Systems IDS. However, they remain difficult to obtain due to privacy constraints, data sensitivity, and the cost of building controlled collection environments such as...