407 matches found
aiengine
AIEngine（人工智能引擎） AIEngine 是新一代交互式/可编程的 Python/Ruby/Java/Lua 数据包检测引擎，具备无需人工干预的学习能力、NIDS（网络入侵检测系统）功能、DNS 域名分类、网络收集器、网络取证等众多功能。 本项目实际托管于 https://bitbucket.org/camp0/aiengine AIEngine 还能帮助网络/安全专业人士识别流量，并开发签名，用于 NIDS、防火墙、流量分类器等场景。 AIEngine 的主要功能包括： 支持在引擎运行时与用户进行交互/编程。 支持 PCRE JIT 进行正则匹配。 支持正则图（复杂检测模式）...
1135-CobaltStrike-ToolKit
1135-CobaltStrike-ToolKit Malleable C2 Files Cobalt Strike的Malleable C2配置文件，被设计用来对抗流量分析。 Cobalt Strike的Malleable C2配置文件，定义了 victim 与 团队服务器 之间的C2通信流量的“通信格式规范和方式”。 通过将C2流量伪装成"正常流量"。以避免直接被NIDS、SOC系统识别为异常流量，可能迷惑安全运营人员。 具体说明...
CVE-2026-45761
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached...
CVE-2026-45752
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...
DEBIAN-CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
CVE-2026-45763
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain L...
EX-NIDS: a Framework for Explainable Network Intrusion Detection Leveraging Large Language Models
This paper introduces eX-NIDS, a framework designed to enhance interpretability in flow-based Network Intrusion Detection Systems NIDS by leveraging Large Language Models LLMs. In our proposed framework, flows labelled as malicious by NIDS are initially processed through a module called the Promp...
SAP Leasing CVE-2020-6306 Remote Authorization Bypass Vulnerability
Description SAP Leasing is prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected SAP Leasing 6.0 SAP Leasing 6.02 SAP Leasing 6.0...
Microsoft ASP.NET Core CVE-2020-0602 Denial of Service Vulnerability
Description Microsoft ASP.NET Core is prone to a remote denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft ASP.NET Core 2.1 Microsoft ASP.NET Core 3.0 Microsoft ASP.NET Core 3.1 Recommendations Block external...
Oracle PeopleSoft Enterprise PeopleTools Cpujan2020 Multiple Remote Security Vulnerabilities
Description Oracle PeopleSoft Enterprise PeopleTools is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. These vulnerabilities affect the following supported versions: 8.56, 8.57 Technologies Affected Oracle PeopleSoft Enterprise...
Microsoft Office Online CVE-2020-0647 Spoofing Vulnerability
Description Microsoft Office Online is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Office...
Microsoft Internet Explorer CVE-2020-0640 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Internet Explor...
Microsoft Windows Remote Desktop Protocol CVE-2020-0612 Denial of Service Vulnerability
Description Microsoft Windows Remote Desktop Protocol is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows Server 2016 Microsoft Windows Server...
Oracle Enterprise Manager for Fusion Middleware CVE-2020-2614 Remote Security Vulnerability
Description Oracle Enterprise Manager for Fusion Middleware is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTP' protocol. The 'APM Mesh' component is affected. This vulnerability affects the following supported versions: 13.2, 13.3 Technologies Affected...
Adobe Illustrator APSB20-03 Multiple Memory Corruption Vulnerabilities
Description Adobe Illustrator is prone to multiple memory-corruption vulnerabilities. An attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Adobe...
Juniper Junos CVE-2020-1608 Multiple Denial of Service Vulnerabilities
Description Juniper Junos is prone to multiple denial-of-service vulnerabilities. An attacker may exploit these issues to cause denial-of-service conditions. Technologies Affected Juniper Junos 17.2R2-S6 Juniper Junos 17.2R2-S7 Juniper Junos 17.2R2-S8 Juniper Junos 17.2R3 Juniper Junos 17.2R3-S1...
SQLite Multiple Security Vulnerabilities
Description SQLite is prone to the following security vulnerabilities. 1. Multiple denial-of-service vulnerabilities 2. Multiple security vulnerabilities An attacker can exploit these issues to cause denial-of-service conditions. SQLite version 3.30.1 is vulnerable. Technologies Affected Redhat...
cURL CVE-2019-15601 Remote Security Bypass Vulnerability
Description cURL is prone to a remote security-bypass vulnerability. An attacker can leverage this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. cURL versions prior to 7.68.0 are vulnerable. Technologies Affected Haxx Curl 7.34.0 Haxx Cur...
Cisco Unified Customer Voice Portal CVE-2019-16017 Denial of Service Vulnerability
Description Cisco Unified Customer Voice Portal is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCvp72741. Technologies Affected Cisco Unified...