sack

sack 识别用于社会工程攻击的会话连接。 ========== 这是第一个通过社交支持实时攻击来跟踪受害者的框架。 使用示例：python sack.py 必须以root模式运行。 支持简单模块的开发 不能忘记的一件事 stats.html 这里你可以看到受害者跟踪的统计信息。 Modules go codename value 这个工具的创作灵感来自爱，尽管过程很混乱。我在哥伦比亚的DragonJAR安全会议2016和墨西哥的DurivaCON上提到过它。 你喜欢监视你的受害者吗？用sack可以 你想要进行钓鱼攻击吗？用sack可以 警告...

nova-tracer

Nova-tracer 代理监控与可见性 使用 NOVA Framework 为 Claude Code 提供安全监控和提示注入防御。 功能特性 会话追踪 - 捕获所有工具使用情况，包含时间戳和元数据 提示注入检测 - 三级扫描（关键词、语义ML、LLM）- 被动监控并发出警告 危险命令拦截 - 在执行前主动阻止破坏性操作 MCP 与技能追踪 - 追踪 MCP 服务器调用和代理技能调用，提供详细分解 交互式 HTML 报告 - 可视化时间线、对话追踪和可展开的事件详情 AI 驱动摘要 - 通过 Claude Haiku 生成智能会话摘要 可配置 -...

SUSE CVE-2026-18663

A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...

CVE-2026-18663

A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...

CVE-2026-18663

The CVE-2026-18663 entry concerns 389-ds-base. The get_ldapmessage_controls_ext() function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPI_REQCONTROLS pblock slot, leading to a double-free when teardown frees the same pointer agai...

CVE-2026-18663

A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...

CVE-2026-18663

A flaw was found in 389-ds-base. The getldapmessagecontrolsext function frees the parsed controls array on the Session Tracking critical-control rejection path without clearing the SLAPIREQCONTROLS pblock slot. Operation teardown then frees the same pointer again, causing a double-free. An...

PT-2026-71042

Name of the Vulnerable Software and Affected Versions 389-ds-base affected versions not specified Description A flaw exists where the get ldapmessage controls ext function frees the parsed controls array during the Session Tracking critical-control rejection path but fails to clear the SLAPI...

CVE-2026-52870

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enabletasks for tasks/list, tasks/get, tasks/result, and tasks/cancel operate only on task identifiers without recordin...

📄 Starlink DNS Rebinding

This Metasploit auxiliary module implements a DNS rebinding attack targeting Starlink infrastructure CVE-2023-52235. The module operates by running a malicious DNS server that dynamically switches responses from a public IP to internal network targets, enabling access to internal services. It als...

CVE-2016-10955

The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking...

How Malwarebytes stops the ransomware attack that most security software can’t see

Imagine this scenario: Your protection software is running perfectly. Systems are protected, definitions are up to date, behavioral analysis is active. Then, suddenly, files across your network start getting encrypted. Backups are being deleted. Ransom notes appear across your machines. Your...

EUVD-2009-1691

Malware in sbrugna...

EUVD-2002-2224

Malware in sbrugna...

EUVD-2016-1946

Malware in sbrugna...

EUVD-2022-2125

Malicious code in bioql PyPI...

EUVD-2022-46970

Malicious code in bioql PyPI...

CVE-2023-42940

A session rendering issue was addressed with improved session tracking. This issue is fixed in macOS Sonoma 14.2.1. A user who shares their screen may unintentionally share the incorrect content...

CVE-2022-44007

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation...

CVE-2020-28333

Barco wePresent WiPG-1600W devices allow Authentication Bypass. Affected Versions: 2.5.1.8. The Barco wePresent WiPG-1600W web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a "SEID" token that is appended to the end of URLs in GET...