CVE-2021-3122-Details

CVE-2021-3122-Dettagli Post sul blog su come abbiamo trovato una CVE in AlohaPOS. https://www.sentinelone.com/blog/cve-2021-3122-how-we-caught-a-threat-actor-exploiting-ncr-pos-zero-day/...

redxor

लिनक्स मालवेयर C2 'RedXOR' - एक उदाहरण जाँच यह पैकेज इस बात का प्रदर्शन है कि किस प्रकार Zeek का उपयोग करके लिनक्स बैकडोर "redXOR" की अवस्था-आधारित विधियों state based methods से जाँच की जा सकती है। संदर्भ: Corelight ब्लॉग...

Microweber Information Disclosure

Microweber contains a vulnerability that allows exposure of sensitive information to an unauthorized actor in Packagist microweber/microweber prior to 1.2.11. id: CVE-2022-0281 info: name: Microweber Information Disclosure author: pikpikcu severity: high description: Microweber contains a...

Attacker-Group-Predictor

Attacker-Group-Predictor Lo strumento predice i gruppi di attaccanti basandosi sulle tecniche e i software utilizzati. Effettua ricerche basate sul framework MITRE ATT&CK™ Come funziona? 1- Raccogliere dati da https://attack.mitre.org/ sui gruppi di attaccanti 2- Ottenere dati dall'utente...

gitxray

Willkommen bei Gitxray Gitxray kurz für Git X-Ray ist ein vielseitiges Sicherheitstool, das für die Nutzung auf GitHub-Repositories entwickelt wurde. Es kann für viele Zwecke eingesetzt werden, darunter OSINT und Forensik. gitxray nutzt öffentliche GitHub-REST-APIs, um Informationen zu sammeln, d...

PolinRider

PolinRider: Attore minaccioso della RPDC impianta malware in centinaia di repository GitHub Data: 2026-03-07 Ultimo aggiornamento: 2026-04-11 — vedi Aggiornamento del 10–11 aprile sotto Gravità: CRITICA — infezione attiva della supply chain in 1.950+ repository pubblici, fusione operativa...

exim-cve-2019-10149-data

Exim CVE Datensammlung Datensammlung zu Exim-Sicherheitslücken CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 CVE-Ankündigung: https://vulners.com/cve/CVE-2019-10149 Exploit-Details: https://www.exploit-db.com/exploits/46974 Zeitleiste des Problems: https://seclists.org/fulldisclosure/2019/Jun/16...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

stride-gpt

STRIDE GPT is an AI-powered threat modelling tool that leverages Large Language Models LLMs to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application details, such as the application type, authentication methods, and whether the...

DEBIAN-CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

Improper privilege management in Actor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79090

CVE-2026-79090 is an improper privilege management flaw in the Actor component of Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, could craft an HTML page to bypass system access restrictions . Google classifies this as Chromium severity: Low , yet the CNA...

EternalLiberty

EternalLiberty Beschreibung Dieses Repository enthält alle Aliase von Bedrohungsakteuren, die von verschiedenen Threat-Intelligence-Unternehmen in ihren Berichten verwendet werden. Ziele Dies ermöglicht es, die Bedrohungsakteure, die Sie untersuchen oder suchen möchten, anhand des Namens zu finde...

Mandiant-Azure-AD-Investigator

Mandiant Azure AD Investigator Focus su TTP di UNC2452 Panoramica Questo repository contiene un modulo PowerShell per rilevare artefatti che possono essere indicatori dell'attività di UNC2452 e di altri attori di minacce. Alcuni indicatori sono indicatori di compromissione ad "alta fedeltà", ment...

attack-stix-data

ATT&CK® STIX Data MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and ...

CVE-2026-61397 Apache CloudStack: OAuth2 Token Cross-Request Leak

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...

ROS-20260819-73-0055

The vulnerability in Tomcat11 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2026-50143

The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL with the attacker-controlled...