ROS-20261005-73-0122

The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-105648: Incomplete List of Disallowed Inputs

Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A...

ROS-20261005-73-0004

The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

NetAgent: Multi-Task Agentic Network Traffic Analysis Made Practical

Network traffic analysis is central to network security, spanning tasks from intrusion detection to encrypted traffic classification. Existing approaches either train task-specific models that generalize poorly or rely on costly traffic foundation models that still struggle under distribution...

Adaptive-Shot Hybrid Quantum Anomaly Detection for Tactile Internet Security: Reliability-Aware Measurement Allocation under Resource Constraints

Tactile Internet TI security analytics must balance reliable thresholded decisions with constrained computational and measurement resources. We study this tension for finite-shot hybrid quantum anomaly inference and introduce the Adaptive-Shot Variational Quantum Circuit AS-VQC policy. This...

ANT: A Multi-Granularity Network Traffic Dataset and Benchmark for Agents Behavior Auditing

The growing adoption of large language model LLM agents creates a need for network administrators and security teams to audit agent behavior within organizational networks without inspecting private user content. Network traffic offers an observable source of evidence, but how much it reveals abo...

Deep Defence on Wheels: A Dual Intrusion Detection System Architecture for Comprehensive In-Vehicle Network Security

Increasing connectivity to the outside world and the lack of inbuilt security mechanisms have made legacy intra-vehicular networks vulnerable to cyberattacks. Initial research focused on maximising detection accuracy for known and unknown attacks, often using large, full-precision machine learnin...

CVE-2026-105647: Time-of-check Time-of-use (TOCTOU) Race Condition

Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network. A successful attack would not result i...

CVE-2026-105766: Cleartext Transmission of Sensitive Information

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-104712: Asymmetric Resource Consumption (Amplification)

Asymmetric resource consumption amplification vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal java.math.BigDecimal property that is then rendered through the Struts tag library, the framework can produce a response many orders of magnitude large...

CVE-2024-36971

CVE-2024-36971 — إثبات المفهوم للبحث والتحليل فقط ⚠️ إخلاء المسؤولية — اقرأ قبل استخدام هذا المستودع هذا المستودع مخصص فقط لـ البحث الدفاعي والتحليل والإبلاغ المسؤول. يحتوي على ملف إثبات مفهوم غير قابل للاستغلال باسم CVE-2024-36971 ومقتطف من رأس نواة أندرويد متاح للجمهور sock.h لتوضيح المنطقة...

MAL-2026-17479 Malicious code in css-gap-decorations-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8126656cc344a4f632b8ddf5a23683fc92ac22798bb67e1aed6bca73ac82d7b6 The package is published as a CSS polyfill but ships no polyfill functionality. On require, thunderboltRegistry.js uses childprocess.execSync to run...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC : pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 Ou utilisez le script python checkicmpdos.py 127.0.0.1 Cette vulnérabilité permet à un attaquant, dès lors...

zeek-jetdirect

Zeek Package لـ zeek-jetdirect .. image::...

aws-vault

AWS Vault !WARNING This project has been abandoned and it's not receiving any more updates. If you want to continue to receive updates or contribute, please feel free to look at the active fork at: https://github.com/ByteNess/aws-vault AWS Vault is a tool to securely store and access AWS...

jugular

jugular استخدم jugs للبحث عن CUPS: مرسل UDP فائق السرعة، يحاول إثارة عمليات cups-browsed المستمعة لإجراء استدعاء HTTP. هذا ماسح ضوئي عالي الأداء يكتب حزم UDP مباشرة إلى الشبكة. التثبيت Ubuntu أو ما شابه sudo apt install golang libpcap0.8-dev go install github.com/lkarlslund/jugular@main ... أو قم...

anviz-m3-rfid-cve-2019-11523-poc

Problèmes de sécurité du contrôle d'accès RFID Anviz M3 Des problèmes de sécurité ont été découverts sur le dispositif de contrôle d'accès RFID Anviz M3 lorsqu'il fonctionne en mode autonome connecté à un réseau TCP/IP, pouvant entraîner un contournement du contrôle d'accès ainsi que la fuite et ...

Internet-Scanner

Local Network Scanner A Tkinter GUI that scans a local IPv4 network ARP + nmap probing, shows devices, lets you run full port scans, and export results. Quick overview ARP scan to discover devices on the LAN. Improved nmap probes for hostname, vendor, open ports, OS guess, and latency. Full-port...

phantomprint

PHANTOMPRINT Passive Hybrid ANalysis Tool for Os-agnostic Multiprotocol PRofiling & INTelligence Fingerprint hosts on your network without sending a single packet. PHANTOMPRINT correlates multiple passive signals TCP/IP stack, TLS/JA4, DHCP Option 55, HTTP/2 HPACK, DNS behavior to identify...

CVE-2023-27163

CVE-2023-27163 Request-Baskets v1.2.1 - تزوير الطلب من جانب الخادم SSRF تم اكتشاف أن request-baskets حتى الإصدار v1.2.1 تحتوي على ثغرة تزوير الطلب من جانب الخادم SSRF عبر المكون /api/baskets/name. تسمح هذه الثغرة للمهاجمين بالوصول إلى موارد الشبكة والمعلومات الحساسة عبر طلب API مصمم خصيصاً. التثب...