turbinia

Turbinia 摘要 注意：Turbinia 将不再开发新功能，并已进入维护模式。用户应关注OpenRelik。 Turbinia 是一个开源框架，用于部署、管理和运行分布式取证工作负载。其目标是自动运行常见的取证处理工具（如 Plaso、TSK、strings 等），以帮助在云端处理证据、扩展大量证据的处理能力，并通过尽可能并行处理来缩短响应时间。 工作原理 Turbinia 由客户端、服务器和工作者等不同组件构成。这些组件可以在云端、本地机器上运行，或采用混合方式。Turbinia 客户端向 Turbinia 服务器提交证据处理请求。Turbinia...

axiom

警告 : Axiom Classic 现已进入维护模式。我们鼓励您迁移到新的 Ax Framework。在接下来的几个月里，我们将在 2025 年之前为 Axiom Classic 引入必要的质量改进更新。Axiom 万岁！ Axiom 是一个动态基础设施框架 ，用于高效处理多云环境，构建和部署专注于进攻和防御安全的可重复基础设施。 Axiom 的工作原理是将您选择的工具预安装到“基础映像”上，然后使用该映像部署新实例。之后，您可以连接并立即访问许多对漏洞猎人和渗透测试人员有用的工具。借助不可变基础设施的强大功能，大部分工作已为您完成，您可以快速启动 15 个实例，执行分布式的...

yara

!IMPORTANT Este proyecto está en modo de mantenimiento. Más información: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA en pocas palabras YARA es una herramienta destinada aunque no limitada a ayudar a los investigadores de malware a identificar y clasificar muestras de malware...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK for Java AWS SDK for Java 使 Java 开发者能够轻松使用 Amazon Web Services 并构建可扩展的解决方案，涵盖 Amazon S3、Amazon DynamoDB、Amazon Glacier 等。 请参阅 AWS SDK for Java 2.x 了解如何开始。 自 2024 年 7 月 31 日起进入维护模式 AWS SDK for Java 1.x 已进入维护模式。AWS SDK for Java 1.x 于 2024 年 7 月 31 日进入维护模式，并将于 2025 年 12 月 31 日停止支持。在维护期间，AWS...

security_monkey

注意：Security Monkey 已进入维护模式，将于 2020 年停止服务。 AWS 用户请使用 AWS Config。 GCP 用户请使用 Cloud Asset Inventory。 Security Monkey Security Monkey 可监控您的 AWS 和 GCP 账户，检测策略变更并针对不安全配置发出警报。支持 OpenStack 公有云和私有云。Security Monkey 还可监视您的 GitHub 组织、团队和仓库。 它提供一个单一界面，用于浏览和搜索您所有的账户、区域和云服务。这只猴子会记住先前的状态，并准确显示更改了什么内容以及何时更改。...

RedEye

RedEye ：红队C2日志可视化 ⚠️ 此仓库当前处于维护模式 ⚠️ 本GitHub仓库不再积极开发。我们会审查社区的问题和拉取请求以便修复bug，但不会考虑任何新功能添加。 RedEye 是一个开源分析工具，由 CISA 和 DOE 的 太平洋西北国家实验室 开发，旨在帮助 红队 可视化和报告指挥与控制活动。该工具允许操作员评估和展示复杂数据，评估缓解策略，并针对红队评估做出有效决策。该工具解析日志（例如来自 Cobalt Strike 的日志），并以易于理解的格式呈现数据。用户随后可以标记工具内显示的活动并添加评论。操作员可以使用 RedEye...

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

Reyrolle 7SR5 (all versions

EUVD-2026-72668

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-13414

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

WordPress CMP plugin < 4.1.18 - Unauthenticated Maintenance Mode Disable vulnerability

Unauthenticated Maintenance Mode Disable vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin CMP – Coming Soon & Maintenance versions 4.1.18...

CVE-2026-13414 CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

CVE-2026-13414

CVE-2026-13414 affects the CMP – Coming Soon & Maintenance WordPress plugin in versions before 4.1.18 . The vulnerability is an unauthenticated maintenance mode disable via the cmp_disable_comingsoon_ajax AJAX action. The plugin does not perform authorization checks on this action and relies on a...

EUVD-2026-66867

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

Astra Linux – Vulnerability in Zabbix

Zabbix Frontend offers a feature that enables administrators to manage the installation and ensure that only certain IP addresses can access it. This way, no user will be able to access the Zabbix Frontend during maintenance, and sensitive data will be protected from being disclosed. An attacker...

CVE-2026-75919

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...

CVE-2026-75919 phpMyFAQ before 4.1.7 Authentication Bypass via Setup API

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...

CVE-2026-75919 phpMyFAQ before 4.1.7 Authentication Bypass via Setup API

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...