dfir-orc

DFIR ORC 法国网络安全局 ANSSI 本项目由ANSSI 管理。如需了解更多信息，您可以访问专门介绍 ANSSI 开源战略的页面（法语）。您也可以点击上方的徽章了解其含义。 文档 https://dfir-orc.github.io 构建状态 分支| 状态 ---|--- main| release/10.3| 快速开始 root@kitploit: winget install Microsoft.Git Copy .vsconfig file or clone the repository and install Visual Studio git clone...

DFIR-O365RC

目次 1. モジュールの説明 2. インストールと前提条件 1. Dockerを使用する場合 2. 手動インストール 3. DFIR-O365RCアプリケーションの管理 1. アプリケーションの作成 2. アプリケーションの更新 3. アプリケーションの削除 4. アクセス許可とライセンス要件 5. モジュールに含まれる関数 6. 生成されるファイル DFIR-O365RCはSSTIC 2021（情報技術・通信セキュリティに関するシンポジウム）で発表されました。プレゼンテーションのスライドと録画（フランス語）はこちらから入手できます。 ⚠️...

securix

SécurixOS: 安全工作站基础操作系统 !NOTE 本项目处于 alpha 阶段，目前不提供任何支持。 目标 SécurixOS 是由 DINUM 开发的 NixOS 发行版，用于装备安全计算机，服务于系统管理、办公和开发，首先处理非保护级信息，后续可能处理限制传播级信息。 它构成了一种安全 PC 模型，旨在支持访问生产环境及其他关键用途，并根据所用配置提供可变的安全级别。 借助 NixOS，这种安全 PC 模型可针对不同使用场景重新实例化：多代理工作站、多级别工作站、仅内网工作站等，并支持不同团队和不同 VPN 根。 根据 ANSSI...

CVE-2026-58245

creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:37+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...

CVE-2026-11958

ANSSI DFIR-ORC (versions up to 10.2.7) is affected by local privilege escalation via DLLs loaded from a shared temporary directory. An attacker with prior system access can drop a malicious DLL in C:\Windows\Temp and wait for the DFIR-ORC process, which is extracted and executed from that locatio...

PT-2026-21025

Name of the Vulnerable Software and Affected Versions Shared Files versions through 1.7.19 Description A missing authorization flaw exists in Anssi Laitila Shared Files shared-files. The issue impacts the application's ability to properly restrict access to resources. Recommendations Update to a...

CVE-2024-46466

By default, dedicated folders of ZONECENTRAL for Windows up to 2024.3 or up to Q.2021.2 ANSSI qualification submission can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONECENTRAL has to be modified to prevent this...

scap-security-guide bug fix and enhancement update

An update is available for scap-security-guide. This update affects Rocky Linux 8, Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The scap-security-guide project provides a guide f...

CVE-2023-50439

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission, ZED! for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows...

Code injection

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows...

Design/Logic Flaw

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which...

Design/Logic Flaw

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL fo...

CVE-2023-50441

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which...

CVE-2023-50444

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission; ZED! for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission; ZONECENTRAL for Windows before 2023.5; ZEDMAIL fo...

CVE-2023-50439

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 ANSSI qualification submission, ZED! for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before Q.2021.2 ANSSI qualification submission, ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows...

CVE-2023-50440

The CVE-2023-50440 issue affects multiple PRIMX ZED ecosystem containers. Specifically, ZED! for Windows prior to Q.2020.3, ZED! for Windows prior to Q.2021.2, ZONECENTRAL for Windows prior to Q.2021.2 and prior to Q.2023.5, ZEDMAIL (Windows prior to 2023.5), and ZED! (Windows, Mac, Linux prior t...

CVE-2023-50443

CVE-2023-50443 affects PRIMX CRYHOD for Windows (versions prior to Q.2020.4 and prior to 2023.5). Root cause: an unauthenticated attacker can modify encrypted disks to inject a UNC reference, causing the host to initiate outbound network traffic when such disks are opened. Impact is outbound traf...

CVE-2023-50444

CVE-2023-50444 affects PRIMX ZED! and related products where default containers include an encrypted version of sensitive user information. According to the sources, affected items include: ZED! for Windows before Q.2020.3; ZED! for Windows before Q.2021.2; ZONECENTRAL for Windows before Q.2021.2...

CVE-2023-50439

The CVE-2023-50439 entry concerns PRIMX ZED! and ZONECENTRAL/ZEDMAIL on Windows. Affected versions disclose the original path in which containers were created, allowing an unauthenticated attacker to obtain contextual information (e.g., project name). Specifically, ZED! for Windows before Q.2020....

CVE-2023-50441

CVE-2023-50441 affects PRIMX ZONECENTRAL for Windows: encrypted folders created before Q.2021.2 or before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference, potentially triggering outbound network traffic when folders are opened. The entry indicates a low attack com...