CVE-2025-54554

CVE-2025-54554 CVE-2025-54554 – tiaudit REST APIにおける未認証アクセスによる機密情報漏洩 発見者: Amanpreet Parmar | Sr. Security Engineer @Harvard Medical School 概要: CVE-2025-54554は、Tera Insightsが開発したticryptプラットフォームのtiauditコンポーネントにおける脆弱性を特定します。この問題により、未認証のユーザーがREST...

krane

Krane Kubernetes RBAC Analysis made Easy Krane is a simple Kubernetes RBAC static analysis tool. It identifies potential security risks in K8s RBAC design and makes suggestions on how to mitigate them. Krane dashboard presents current RBAC security posture and lets you navigate through its...

Sentinel-Queries

KQL per Microsoft Sentinel Alcuni suggerimenti, trucchi ed esempi per l'uso di KQL con Microsoft Sentinel. 1. Introduzione 2. L'anatomia di una query KQL 3. Le basi 1. Nozioni di base sul tempo 2. Nozioni di base su Where 3. Nozioni di base su Project 4. Nozioni di base su Summarize 5. Nozioni di...

Microsoft-Sentinel-SecOps

Microsoft Sentinel - Operazioni SOC Benvenuto in Microsoft Sentinel - Operazioni SOC Questo repository contiene molti contenuti di Microsoft Sentinel con query per esplorazione, caccia alle minacce e altre attività. Risorse Hunting Processi Eventi di sicurezza Aggiornamenti Varie Articoli su Azur...

CVE-2026-82448

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

PT-2026-83427

Shinobi before commit 5a76c74f contains a hardcoded connection key in the child node service that allows unauthenticated attackers to execute arbitrary database queries. Attackers reaching the child node port can present the hardcoded key during WebSocket handshake, then dispatch SQL queries...

crowdstrike-falcon-queries

crowdstrike-falcon-queries Una raccolta di Search Processing Language SPL di Splunk per la Threat Hunting con CrowdStrike Falcon Sviluppato e mantenuto dal team Intelligent Response di i-secure co., Ltd. crowdstrike-falcon-queries Esecuzione di eseguibili rinominati Elenco dei binari Living Off T...

Threat_Hunting

ThreatHunting Algumas consultas de threat hunting da CrowdStrike úteis para blue teamers e caçadores de ameaças...

KQL-threat-hunting-queries

Threat hunting/detecting using KQL queries root@kitploit: | |/ / | | | | | | | | | / | | | | | | | | | \ | | | | \ | |/ | | ' | | | | | | | | || | | | | / \ | | | || | | | | | | | | | || | | | | . | || | | | | | | !NOTE 27 gennaio: dopo quasi un anno di contributi, questo repository è in fase...

GetLAPSPassword

GetLAPSPassword Un tentativo modesto di scrivere uno strumento di dumping LAPS che supporta sia l'autenticazione NTLM che Kerberos utilizzando la libreria impacket. La struttura iniziale di questo strumento è stata presa dall'esempio impacket GetADUsers.py...

CVE-2026-82291

HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-origin requests with authentication. Attackers can execute authenticated GraphQL queries from malicious pages visited by logged-in users to access workspaces, projects, forms,...

osquery-defense-kit

osquery-defense-kit Query osquery per rilevamento e risposta agli incidenti, contenenti oltre 250 query pronte per la produzione. ODK osquery-defense-kit è unico in quanto le query sono progettate per essere utilizzate come parte di una pipeline di rilevamento e risposta in produzione. Le query d...

CVE-2026-82291 HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials

HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-origin requests with authentication. Attackers can execute authenticated GraphQL queries from malicious pages visited by logged-in users to access workspaces, projects, forms,...

CVE-2026-82291

HeyForm versions before 3.0.0-rc.8 reflect the request Origin header in CORS responses while simultaneously allowing credentials. This misconfiguration enables attackers to execute authenticated GraphQL queries from a malicious page visited by a logged-in user, granting access to workspaces, proj...

CVE-2026-82291 HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials

HeyForm before 3.0.0-rc.8 reflects the request Origin header in CORS responses while allowing credentials, enabling cross-origin requests with authentication. Attackers can execute authenticated GraphQL queries from malicious pages visited by logged-in users to access workspaces, projects, forms,...

CVE-2026-59285

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4...

EUVD-2026-67174

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-68000

The front-end interface /cms/category/list of MCMS =6.2.0 is vulnerable to SQL injection. The size parameter is directly concatenated into the LIMIT clause of SQL through FreeMarker $size without being parameterized and bound. The built-in SqlInjectionUtil employs regular expression blacklist...

CVE-2026-9668

With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitati...