vcsa-hardening-tool

Outil de durcissement et journalisation VCSA Un script de durcissement automatisé pour le vCenter Server Appliance VCSA de VMware, conçu pour imposer une segmentation réseau Zero Trust et un audit forensique approfondi. Cet outil est conçu pour atténuer les risques critiques associés aux menaces...

CyberDefense-Lab

Laboratoire de cybersécurité : Infrastructure Blue Team et défense réseau Ce projet de laboratoire démontre la création d'une infrastructure « Blue Team » intégrée, axée sur la sécurité réseau centralisée, les systèmes de détection/prévention d'intrusion IDS/IPS et la gestion des informations et...

dod-blue-team-network-lab

Laboratoire de Sécurité Réseau et de Durcissement Blue Team du DoD Résumé Exécutif Laboratoire de sécurité défensive haute fidélité simulant un réseau d'entreprise aligné sur le DoD. Ce projet démontre une segmentation réseau structurée, un durcissement système, une ingestion de télémétrie...

reachability

-- بدء إخلاء المسؤولية -- استخدم على مسؤوليتك الخاصة – لست مسؤولاً بأي حال عن أي أضرار ناتجة – إذا لم يكن لديك إذن صريح من مالك الشبكة، لا تقم ولا أكرر لا تقم بتشغيل هذا هذا هو بايثون يلتف حول MASSCAN https://github.com/robertdavidgraham/masscan -- نهاية إخلاء المسؤولية -- تفترض هذه البرامج...

leprechaun

Leprechaun .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,. .,-' --' --' /...

DrayTek Vigor - Command Injection

DrayTek Gateway devices Vigor2960, Vigor300B, etc. are vulnerable to command injection via the session parameter in the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint. An attacker can inject arbitrary commands and retrieve their output. id: CVE-2024-12987 info: name: DrayTek Vigor - Command...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use the correct macoffset to unwind the gsoskb in nshgsosegment. As shown in the call trace, the skbpanic occurred due to an incorrect skb-macheader in nshgsoSegment. Invalid opcode: 0000 1 PREEMPT SMP KASAN PTI CPU: 3...

Security Advisory 0150

Security Advisory 0150 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X...

CVE-2026-48931

A flaw was found in Node.js HTTP Agent. This vulnerability allows a client to accept a server response as valid even before the client has sent its request. This can lead to unexpected behavior and potentially information disclosure. Mitigation Limit outbound HTTP/1.1 from Node.js clients to...

Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)

CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...

super v1.2.2

📡 SPR: Open Source, secure, user friendly and fast wifi routers for your home. Overview Create an adaptive, micro-segmented network for managing WiFi devices, remote VPN access, and wired systems. One Password Per WiFi Device Policy Based / Zero Trust Network Access Per-Device DNS Rules & Ad Bloc...

CVE-2026-48487

A flaw was found in Zeroconf, a Python library for multicast DNS service discovery. An unauthenticated attacker on the local network can exploit a vulnerability in how the system processes incoming DNS records. By sending a specially crafted record with an excessive length, the attacker can cause...

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu's other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs observed the dropper reaching its...

PT-2026-61541

A critical architectural breakdown targeting high-throughput data pipelines has emerged over the last 24 hours. A severe Zero-Day vulnerability dubbed "PhantomRelay" tracked as CVE-2026-74210, CVSS 9.8 has been publicly disclosed, severely impacting Apache Kafka core cluster replication and auth...

wannacry-soc-lab

WannaCry SOC Investigation Lab Overview This project simu...

Exploit for CVE-2020-25078

ABYSS C2 — HiSilicon DVR Exploit Framework ⚠️ EDUCATIONAL...

Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

CVE-2026-44015: Server-Side Request Forgery (SSRF)

Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authenticated user can perform Server-Side Request Forgery SSRF by creating a cluster node pointing to an arbitrary internal URL and then sending API requests with the X-Node-ID header. The Proxy middleware forwar...

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...

CVE-2026-7412

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthenticated remote attacker can exploit this design flaw to force the BaSyx server to execute blind HTTP POST requests to...