Cacti < 1.2.25 Insecure Deserialization

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. id: CVE-2023-30534 info: name: Cacti 1.2.25 Insecure Deserialization author: k0pak4 severity: medium description: | Cacti is an open source...

sigint-hombre

sigint-hombre Author: John Page — malvuln aka hyp3rlinx Copyright c 2026 Purpose: Generate derived Suricata detection rules from live URLhaus threat indicators at runtime and deploy them to the Security Onion platform for high-coverage real-time network monitoring. Current Version v2.0 • Major...

BerrySentinel

🫐 Berry Sentinel Detector conductual de conexiones C2 Command & Control en tiempo real Zero-signature · Bulletproof Collection · Deep Scan · Kill Engine ¿Qué es? Berry Sentinel monitorea todas las conexiones de red activas en tu sistema y analiza el comportamiento de los procesos que las generan...

zabbix-template-CVE-2020-1472

zabbix-template-CVE-2020-1472 Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event ID's 5827, 5828 & 5829. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472...

ThreatIntelligenceDiscordBot

Threat Intelligence Discord Bot The vx-underground Threat Intelligence Discord Bot gets updates from various clearnet domains, ransomware threat actor domains, and Telegram channels. This bot will check for updates in intervals of 1800 seconds omit Telegram bot, this is gotten in real time. Don't...

shellshock

shellshock scripts associated with bourne shell EVN function parsing vulnerability CVE-2014-6271 dhcpmon.py - This script monitors DHCP frames for potentially malicious characters within BOOTP and DHCP reply fields...

internalblue

Los chips de Broadcom se utilizan en aproximadamente mil millones de dispositivos, como todos los iPhones , MacBooks , la serie Samsung Galaxy S , la serie Google Nexus más antigua, los Thinkpads más antiguos, los Raspberry Pis , varios dispositivos IoT y más. En 2016, Cypress adquirió la divisió...

CVE-2025-29824

CVE-2025-29824 win1021h2190445608x64 win1123h2226315126x64 testclient test program monitorclfssys driver to monitor all IRP requests of clfs poc Crash Blue screen poc LPE win10poc win11poc Compilation basic information Windows SDK version: 10.0 latest installed version Platform toolset: Visual...

cacti

Cacti Overview Cacti is an open-source network monitoring and graphing platform built on RRDtool. It provides a scalable framework to collect, store, and visualize time-series data from network devices, servers, and applications. Core capabilities include: Automated device discovery Local and...

CVE-2021-43798

CVE-2021-43798 Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions iss vulnerable to directory traversal, allowing access to local files Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 except for patched versions i...

perf-exploiter

perf-exploiter CVE-2014-2630 In one of our recent penetration tests we have abused a vulnerability affecting a suid binary called "xglance-bin". Part of HP Performance Monitoring solution , it allowed us to escalate our local unprivileged sessions on some Linux RHEL 7.x/8.x systems to root. To be...

falco

Falco...

Hunt-Weird-Syscalls

Hunt-Weird-Syscalls This is a ETW based POC to monitor for abnormal syscalls. For now, the syscalls NtOpenThread and NtSetContextThread are monitored to identify IOCs indicating both direct and indirect syscalls. Description This project uses ETW, more precisely kernel based ETW providers, to...

Hunt-Weird-ImageLoads

Hunt-Weird-ImageLoads This project was created to play with different IOCs caused by Imageload events. It leverages ETW to monitor for ImageLoad events and walks the callstack to identify some possible IOCs, such as: RWX page in callstack Stomped module in callstack Module proxying ntdll -...

CVE-2024-49681

CVE-2024-49681 WP Sessions Time Monitoring Full Automatic = 1.0.9 - Unauthenticated SQL Injection Description: The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.0.9 due to insufficient escaping on the user suppli...

ransomwatch

ransomwatch 👀 🦅 ransomwatch trails the extortion sites used by ransomware groups and surfaces an aggregated feed of claims please use the issue template when submitting new groups ⚠️ content withinransomwatch.telemetry.ltd, posts.json, groups.json alongside the docs/ & source/ directories is...

ransomwatch

ransomwatch 👀 🦅 ransomwatch はランサムウェアグループが使用する恐喝サイトを追跡し、主張の集約フィードを公開します 新しいグループを提出する際は issue テンプレート をご利用ください ⚠️ ransomwatch.telemetry.ltd、posts.json、groups.json 内のコンテンツと、docs/ および source/ ディレクトリは、実際の脅威アクターのホスティング選択に基づいてほぼリアルタイムで動的に生成されます。 サニタイズ処理は行われていますが、ransomwatch...

usbkill

« usbkill » es un interruptor de seguridad anti-forense que espera un cambio en tus puertos USB y, a continuación, apaga inmediatamente tu ordenador. Para ejecutarlo: root@kitploit: sudo python usbkill.py o root@kitploit: sudo python3 usbkill.py Proyecto relacionado; la misma idea, pero...

snorby

Snorby github.com/Snorby/snorby github.com/Snorby/snorby/issues github.com/Snorby/snorby/wiki irc.freenode.net snorby Description Snorby is a ruby on rails web application for network security monitoring that interfaces with current popular intrusion detection systems Snort, Suricata and Sagan. T...

CVE-2026-85290

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Cron::recur method writes an invalid cron key from the URL path directly to the application log without neutralizing CRLF characters. An unauthenticated requester can...