tracehound

高速API向け決定的ランタイムセキュリティバッファ 外部システムが脅威を通知。Tracehoundが証拠を保存。 Website · Documentation Index · API Reference · Configuration · RFCs · Security · Changelog...

beelzebub v3.9.1

Beelzebub Deception Runtime Framework Beelzebub is an open-source deception runtime that deploys adaptive, LLM-powered decoy services across SSH, HTTP, TCP, TELNET, and MCP protocols. It goes beyond passive honeypots by actively engaging attackers in realistic interactions, collecting high-fideli...

OpenPLC_v3

OpenPLC Runtime version 3 简介 OpenPLC 是一个基于软件、易于使用的开源可编程逻辑控制器。我们的重点是为自动化与研究提供低成本的工业解决方案。OpenPLC 已被多篇研究论文用作工业网络安全研究的框架，因为它是唯一提供完整源代码的控制器。OpenPLC 项目包含三个子项目： 1. Runtime 2. 编程编辑器 3. HMI 构建器 安装 root@kitploit: mkdir /opt/PLC cd /opt/PLC git clone https://github.com/tranquac/OpenPLCv3.git cd OpenPLCv3...

AndroidSecurityEvolution

Android 安全演进 自 Android 5.0 Lollipop （API 21）起，各主要 Android 版本的重要安全增强。 Android 5.0（API 21）- Lollipop Android 5 安全增强 自 2023 年 8 月起，该 Android 版本将只能收到 Google Play Services 更新，参见 Google Play services discontinuing updates for KitKat API levels 19 & 20 starting August 2023 默认启用全盘加密（FDE）（制造商仍可选择关闭），参见加密和...

anticipator

Anticipator マルチエージェントAIシステムのためのランタイムセキュリティ。 Anticipatorは、プロンプトインジェクション、認証情報漏洩、エンコーディング攻撃、ホモグリフスプーフィング、パストラバーサル、そして異常なエージェント動作を、LangGraphパイプライン全体でインシデント化する前に検出します。 LLM不要。埋め込み不要。外部API不要。完全ローカル、完全決定論的、メッセージあたり5ms未満。 ⚡ パイプラインで何か捕捉しましたか？ Issueを開く — 実際の検出例をお待ちしています。 Anticipatorが必要な理由...

KubeArmor v1.7.5-rc2

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

CVE-2026-82747

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

EUVD-2026-68966

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Incorrect Authorization vulnerability in ash-project ash returns records that a runtime read policy denies to any actor. When a resource has an accesstype :runtime read policy a check evaluated per record rather than compiled to a filter, Ash.Policy.Authorizer decides each record in checkresult/1...

CVE-2026-82747

CVE-2026-82747 is an Incorrect Authorization vulnerability in ash-project ash (Elixir API framework), affecting versions 3.4.44 through 3.32.1 . The bug resides in Ash.Policy.Authorizer (lib/ash/policy/authorizer/authorizer.ex): when a resource uses an access_type: :runtime read policy, the check...

windows-malware-behavioral-analysis

使用 REMnux 与 FLARE-VM 进行恶意软件行为分析 一个实用的蓝队恶意软件调查项目，演示如何利用行为分析技术在隔离的实验室内安全地分析可疑的 Windows 可执行文件。 与对恶意软件源代码进行逆向工程不同，本项目侧重于观察运行时行为、收集主机与网络遥测数据、提取入侵指标（IOC），并将攻击者活动映射到 MITRE ATT&CK 框架。 目标 构建安全的恶意软件分析实验室 观察恶意软件执行期间的行为 监控 Windows 主机活动 捕获恶意网络流量 识别持久化机制 提取入侵指标（IOC） 将调查结果映射到 MITRE ATT&CK 挖掘检测机会 调查工作流程 阶段 1 —...

SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...

CVE-2025-29927_Next.js_Auth_Bypass

CVE-2025-29927 - Next.js Auth Bypass PoC 这是一个用于检测严重影响 Next.js 开发应用的漏洞 CVE-2025-29927 的 Proof of Concept PoC Python 脚本，尤其是在使用中间件进行授权时。 📌 该漏洞可完全绕过认证，在中间件实现不当的情况下访问受保护的路由。 🧠 描述 CVE-2025-29927 允许攻击者在特定路由或配置被攻破时，绕过 Next.js 的认证中间件。这是由于 Edge 运行时与受中间件保护的路由结合时出现意外行为所致。 该 PoC 基于返回的 HTTP 标头，验证服务器是否使用带有中间件的...

CVE-2021-25646

Apache Druid RCE title="druid" && title=="Apache Druid" POST /druid/indexer/v1/sampler?for=filter HTTP/1.1 Host: x.x.x.x:8888 Content-Length: 612 Accept: application/json, text/plain, / Origin: http://x.x.x.x:8888 User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

kern

kern: A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. A real, kernel-enforced container in 3.5 ms, out of one 1.52 MB binary with no daemon. 0 RAM at rest · no daemon, no socket, nothing to start · one static binary, libc its only...

CVE-2025-34226

CVE-2025-34226：OpenPLC 运行时中的持久化拒绝服务 漏洞概述 字段| 值 ---|--- CVE ID| CVE-2025-34226 影响| OpenPLC 运行时 V3 修复版本| 提交 095ee09623dd229b64ad3a1db38a901a3772f6fc 严重程度| 高 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N 7.1（高） CWE| CWE-664 资源生命周期控制不当，CWE-20 输入验证不恰当 概要 OpenPLC 运行时在...

EUVD-2026-68455

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to IBM Semeru Runtime

Summary IBM App Connect Enterprise runtime is vulnerable to multiple vulnerabilities due to IBM Semeru Runtime. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

CVE-2026-46333

CVE-2026-46333 针对 CVE-2026-46333 的研究与教育仓库，专注于可复现分析和安全的测试 PoC 工作流。 1 CVE-2026-46333 本项目记录了漏洞行为、测试环境搭建及验证方法，使研究人员和防御者能够负责任地复现结果。 2 安全测试 PoC 本仓库仅用于 经过授权的、本地的、受控的测试 。 仅在你拥有或已获明确许可的系统上使用。 不要在生产系统上运行。 保持测试隔离（虚拟机/容器/实验室主机）。 仅捕获和分享非敏感的输出结果。 安全 PoC 说明见 docs/SAFETESTPOC.md。 3 关于项目 项目背景、目标和路线图见 docs/ABOUT.m...