SLAE-770

SLAE SecurityTube Linux Assembly Expert Esta publicación de blog ha sido creada para cumplir con los requisitos de la certificación SecurityTube Linux Assembly Expert: http://www.securitytube-training.com/online-courses/securitytube-linux-assembly-expert/index.html ID de SLAE: SLAE-770...

EntropicaPublic

Actualizaciones de marzo Necesito trasladar algo de trabajo desde los repositorios privados. Continúa la exploración del uso de modelos masivamente multicabezales con funciones de mezcla y lectura separadas. Actualmente estoy entrenando un Chinese TinyStories en un modelo equivalente a 3B que se...

CVE-2026-33626-Lab

CVE-2026-33626 — LMDeploy 视觉语言 SSRF 实验环境 概述 本仓库重现了 CVE-2026-33626 ，即 LMDeploy 视觉语言图像加载路径中的服务器端请求伪造（SSRF）漏洞。 漏洞行为发生在 LMDeploy 接收图像 URL 时，服务器端图像加载器在不正确阻止内部、私有、回环或链路本地地址的情况下直接获取该 URL。 本实验环境对比： 服务| 版本| 用途 ---|---|--- vuln| LMDeploy 0.12.0| 展示存在漏洞的行为 patched| LMDeploy 0.12.3| 展示修复后的行为 internal| 本地金丝雀服...

batch_jailbreak

Repositorio oficial de Safety in Batches? Understanding and Mitigating Safety Failures in Batch Prompting Kihyun Kim, Hee-Seon Kim, Wonjun Lee, Changick Kim Korea Advanced Institute of Science and Technology KAIST Noticias 2026.09 ¡Nuestro artículo ha sido aceptado en AACL-IJCNLP 2026 Main! 🎉...

bruno

Bruno - IDE de código abierto para explorar y probar APIs. English | Українська | Русский | Türkçe | Deutsch | Français | Português BR | 한국어 | বাংলা | Español | Italiano | Română | Polski | 简体中文 | 正體中文 | العربية | 日本語 | ქართული | Nederlands | فارسی | हिन्दी Bruno es un cliente de API nuevo e...

birdy-edwards

BIRDY-EDWARDS 2.0 Infiltrar y Exponer Herramienta automatizada de inteligencia de Facebook impulsada por IA para perfilado de objetivos, análisis de redes y reporte de amenazas. Se ejecuta completamente en el dispositivo mediante Ollama. Plataforma SOCMINT de Facebook impulsada por IA — 100% loca...

SAFESHIELD: A Decision-Organization Framework for Deployment-Time Safety of Small Language Models

Deployment-time safety of language models is commonly implemented through runtime guardrails such as input moderation, routing, retrieval verification, and output filtering. Existing deployment frameworks provide increasingly capable mechanisms for these functions, but offer limited guidance on h...

An Evaluation of the Semantic Understanding Capabilities of Large Language Models for Web Attack Payloads

Computer vision services delivered through Web interfaces and APIs process textual requests for image-resource acquisition, inference-task configuration, and result management, making Web attack-payload analysis relevant to their deployment security. Large language models LLMs can identify payloa...

The vulnerability of the buffers CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update in the OpenSSL library for the Rust programming language allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the buffers in CipherCtxRef::cipherupdate, CipherCtxRef::cipherupdatevec, and symm::Crypter::update functions in the OpenSSL library for the Rust programming language is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the crypto/tls component in the Go programming language allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the crypto/tls component in the Go programming language is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Backdooring Sparse Autoencoders

Sparse autoencoders SAEs are increasingly used not only to interpret language models but also to intervene on their internal representations. We show that this creates a supply-chain attack surface: a maliciously modified SAE can induce attacker-chosen behavior when inserted into the forward pass...

PT-2026-106133

Name of the Vulnerable Software and Affected Versions Apache Struts versions 2.0.0 through 2.3.37 Apache Struts versions 2.5.0 through 2.5.33 Apache Struts versions 6.0.0 through 6.11.0 Apache Struts versions 7.0.0 through 7.3.0 Description An Expression Language Injection issue exists when the...

CVE-2026-104711: Improper Neutralization of Special Elements used in an Expression Language Statement

Improper neutralization of special elements used in an expression language statement 'Expression Language Injection' vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject an OGNL expression that may lead to remote co...

CVE-2026-86537

Uncaught exception, Loop with unreachable exit condition 'infinite loop', Integer underflow wrap or wraparound vulnerability in Apache Thrift D language bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

endsfuzzer

endsfuzzer endsfuzzer 是一款简单的工具，用于对域名列表中的特定端点进行模糊测试。它会先检查列表中所有域名的一个端点，然后移至下一个端点继续检查。 特性 快速。利用 Go 协程。 对服务器更友好。一次对所有主机测试一个端点。 全面。检查 HTTPS（443 端口）和 HTTP（80 端口）。 安装 endsfuzzer 需要 Golang 才能运行。 go get -u github.com/ameenalkurdy/endsfuzzer 用法 Usage of endsfuzzer: -dL string Path to domains list required...

CVE-2023-23752

CVE-2023-23752 的二进制文件 仅用于道德和教育目的 😉 使用方法 CVE-2023-23752 -u http://someserverexample.com 从源码构建 Go 如果你安装了 Go，请执行： git clone https://github.com/gunzf0x/CVE-2023-23752.git cd CVE-2023-23752 go run main.go -u http://someserverexample.com 许可证 MIT...

antnium

Antnium Anti Tanium Un framework de C2 y un RAT escritos en Go. Este código fuente se publica públicamente como referencia para mi presentación Develop your own RAT - AV & EDR Defense. Antnium pretende cumplir mis propios requisitos, y no los de otros. Funciona para las campañas que he realizado,...

CVE-2025-50360

Pepper 语言中的堆缓冲区溢出漏洞 Pepper 语言 是一种快速解释型编程语言，旨在追求简洁和清晰。它是动态类型语言，并支持垃圾回收。 受影响版本：版本 0.1.1 及更早，提交 961a5d9988c5986d563310275adad3fd181b2bb7 及更早。 状态：未修复；自 2024 年 2 月 15 日起无任何更新。 如何复现（PoC） 创建一个文件，其中一列包含超过 65 个数字。例如， 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33...

hmac-bcrypt

hmac-bcrypt Este repositorio contiene implementaciones de referencia de la función de hash de contraseñas hmac-bcrypt en varios lenguajes. Cada implementación de referencia intenta ser un puerto 1:1 de las implementaciones originales en C y Perl creadas por @epixoip cuando es posible, y son...

tink

Tink NOTA : Tink se trasladó a github.com/tink-crypto y este repositorio ya no está activo. Como estaba previsto, hemos dividido Tink en varios repositorios de GitHub alojados en github.com/tink-crypto. Como consecuencia, hemos puesto este repositorio en modo de solo lectura y no se mantendrá en ...