Hadoop-YARN-RCE

Apache Hadoop YARN ResourceManager의 인증되지 않은 RCE Apache Hadoop YARN ResourceManager의 REST API기본 포트 8088 또는 RPC 포트가 인증이 활성화되지 않은 채 노출되면 무단 접근 취약점 이 존재합니다. 기본적으로 Hadoop은 HTTP 웹 콘솔과 RPC 서비스를 보안 설정 없이 유지합니다. 이로 인해 공격자는 원격으로 임의 코드를 실행하거나 클러스터 리소스를 탈취할 수 있습니다. 영향 클러스터 노드에서의 원격 명령 실행. 리소스 탈취예: 암호화폐 채굴,...

gate0

gate0 Un petit moteur de micro-politique, vérifiable, terminant et déterministe. Pourquoi Gate0 ? J'ai construit Gate0 parce que j'en avais assez de déboguer des politiques basées sur des expressions régulières en production. Je voulais quelque chose de banal, borné et impossible à planter. Si vo...

CVE-2019-16889-poc

Déni de service par consommation de ressources sur Edgemax v1.10.6 Déni de service par consommation de ressources. Cela a été signalé l'année dernière et a été corrigé dans la version 2.0.3. Il s'est vu attribuer le CVE-2019-16889. C'est la première fois que j'utilise asyncio, si vous voyez une...

rakkess

rakkess مراجعة الوصول - إضافة kubectl لعرض مصفوفة الوصول لموارد الخادم مقدمة هل تساءلت يومًا عن حقوق الوصول التي تملكها على مجموعة Kubernetes المقدمة؟ بالنسبة للموارد الفردية، يمكنك استخدام kubectl auth can-i list deployments، ولكن ربما تبحث عن نظرة عامة كاملة؟ هذا هو ما يوفره rakkess. فهو يسرد...

CVE-2026-85100

A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is the function AgentSquad.routeRequest of the file agent-squad/typescript/src/orchestrator.ts of the component Streaming Agent Response Workflow. The manipulation results in resource consumption. It...

CVE-2026-85107

A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFromUrl of the file apps/desktop/electron/main.ts of the component Electron Main Process. Performing a manipulation results in allocation of resources. The attack may be initiated...

CVE-2021-43614

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

CVE-2024-42849

CVE-2024-42849 Un problème dans Silverpeas v.6.4.2 et versions antérieures permet à un attaquant distant de provoquer un déni de service via la fonction de changement de mot de passe. Description Si la demande de changement de mot de passe est interceptée et qu'une chaîne suffisamment longue 1 Mo...

CVE-2026-85107

A vulnerability in NousResearch hermes-agent 0.18.0 affects the resourceBufferFromUrl function in apps/desktop/electron/main.ts (Electron Main Process), allowing a remote attacker with user interaction to trigger uncontrolled resource allocation, resulting in low availability impact. Notably, the...

EUVD-2026-70454

A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the function resourceBufferFromUrl of the file apps/desktop/electron/main.ts of the component Electron Main Process. Performing a manipulation results in allocation of resources. The attack may be initiated...

all-my-collection-repos

Tous les projets de collecte de ressources : Tous les outils de sécurité open source que j'ai collectés : sec-tool-list: Plus de 21K. Aux formats Markdown et Json. Repos Github de collecte de ressources de sécurité: 1000+ repos Github sur la collecte de ressources de sécurité Ressources de...

NodeSecurityShield

Node Security Shield Node Security Shield NSS هي أداة حماية ذاتية مفتوحة المصدر للتطبيق أثناء التشغيل RASP تهدف إلى سد الفجوة في أمان NodeJS الشامل من خلال تمكين المطور و مهندس الأمان من إعلان الموارد التي يمكن للتطبيق الوصول إليها. مستوحاة من ثغرة Log4Shell CVE-2021-44228 والتي يمكن استغلالها لأ...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

awesome-cybersecurity-resources

awesome-cybersecurity-resources Ressources exceptionnelles en cybersécurité, plus. Objectif Ce dépôt contient des ressources en cybersécurité organisées, collectées sur Internet, dans la documentation des dépôts et dans des notes locales sélectionnées. Le format canonique est : une ressource par...

CVE-2022-34169

Описание Проверяет, исправлена ли CVE-2022-34169 на вашей машине. Насколько мне известно, эксплойт был найден сотрудником Google и не опубликован. Поскольку исправление известно, был написан небольшой тестовый код для проверки наличия исправления во время выполнения. Сборка самостоятельно...

CVE-2025-1974

CVE-2025-1974 WhiteHat School 3e promotion - Kim So-eun @salt318 Résumé Causé par une faille dans le contrôleur d'admission Ingress-NGINX, un mécanisme de sécurité clé de Kubernetes Le contrôleur d'admission Ingress-NGINX est exposé au réseau sans authentification Cela permet à un attaquant de...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 نطالب بالإعادة الآمنة لجميع المواطنين الذين تم احتجازهم كرهائن من قبل الجماعة الإرهابية حماس. لن نرتاح حتى يتم إطلاق سراح كل رهينة ويعود إلى منزله بأمان. يمكنك المساعدة في إعادتهم إلى المنزل.https://stories.bringthemhomenow.net/ 🚀 استغلال CVE-2024-41107 🚀 يحتوي...