gopacket

gopacket بواسطة Jacob Paullus @psycep تطبيق Go كامل لـ Impacket - 63 أداة و24 حزمة مكتبة للتفاعل مع بروتوكولات شبكات Windows، وتعداد Active Directory، وتنفيذ الهجمات. مبني كإطار عمل Go أصلي بحيث يمكنك الترجمة مرة واحدة وتشغيله في أي مكان دون تبعيات Python. إصدار تجريبي - تجريبي للغاية. gopacket...

ActiveScanPlusPlus

ActiveScan++ يمتد ActiveScan++ لقدرات الفحص النشط والسلبي في Burp Suite. صُمم لإضافة الحد الأدنى من الحمل على الشبكة، ويحدد سلوك التطبيق الذي قد يكون موضع اهتمام للمختبرين المتقدمين: هجمات ترويسة المضيف المحتملة تسميم إعادة تعيين كلمة المرور، تسميم ذاكرة التخزين المؤقت، إعادة ربط DNS Edge Side...

active-scan-plus-plus

ActiveScan++ يمتد ActiveScan++ لقدرات الفحص النشط والسلبي في Burp Suite. صُمم لإضافة الحد الأدنى من الحمل على الشبكة، ويحدد سلوك التطبيق الذي قد يكون موضع اهتمام للمختبرين المتقدمين: هجمات ترويسة المضيف المحتملة تسميم إعادة تعيين كلمة المرور، تسميم ذاكرة التخزين المؤقت، إعادة ربط DNS Edge Side...

Secure Speculative Decoding for Large Language Models

Speculative decoding accelerates inference for a large language model LLM, referred to as the target model, by first using a smaller model, referred to as the draft model, to generate candidate tokens and then verifying them with the target model for acceptance or rejection. Prior studies primari...

Cisco ASA Inconsistent Interpretation of HTTP Requests (CVE-2022-20713)

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...

BARE-AI: Bit-Flip Attack Resilience in AI Hardware through Built-In Performance Monitors

Deep Neural Networks DNNs are integral to many safety critical systems, yet they remain highly vulnerable to bit-flip attacks BFAs, where a few memory level perturbations can drastically degrade accuracy. Existing defenses incur significant hardware overhead, depend on retraining, or fail against...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791261872)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791261872 advisory. - In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading...

credential-attacks-toolkit

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

SPOILER

SPOILER: अनुमानित लोड खतरे Rowhammer और कैश हमलों को बढ़ावा देते हैं CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas Eisenbarth and Berk...

meshdeck

meshdeck Arch Linux ARM के लिए MeshDeck पोर्ट - Wilson यह मूल रूप से Arch Linux ARM Wilson रिपॉजिटरी के लिए पोर्ट किया गया था। Wilson रिपॉजिटरी ArchAssault प्रोजेक्ट http://www.archassault.org में विलय हो रही है, क्योंकि दोनों में ओवरलैप और समान लक्ष्य हैं। सभी मूल/अपस्ट्रीम कार्य Dr. Philip...

CVE-2024-57427

CVE-2024-57427 - ثغرة XSS المنعكسة PHPJabbers Cinema Booking System v2.0 عرضة لثغرة البرمجة النصية عبر المواقع المنعكسة XSS. تتعامل نقاط نهاية متعددة مع إدخال المستخدم بشكل غير سليم، مما يسمح بتنفيذ سكربتات خبيثة في متصفح الضحية. يمكن للمهاجمين إنشاء روابط خبيثة لسرقة ملفات تعريف الارتباط الخاصة...

Astra Linux – Vulnerability in Node.js

A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...

Astra Linux – Vulnerability in wpa

Implementations of SAE in hostapd before version 2.10, and wpasupplicant before version 2.10, are vulnerable to side-channel attacks due to cache access patterns. NOTE: This issue exists due to an incomplete fix for CVE-2019-9494...

CVE-2026-97071

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071

The VillaTheme CURCY (woo-multi-currency) WordPress plugin versions up to and including 2.2.17 is vulnerable to an Incorrect Calculation vulnerability (CWE-682). This flaw allows for Integer Attacks , potentially impacting the integrity of data during currency calculations. No specific exploitati...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

EUVD-2026-92310

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

TID-The-Instant-Destroyer

TID — The Instant Destroyer Independent security research in the field of protection against cache-based side-channel attacks. Overview TID is a specialized protocol designed to eliminate sensitive data remnants such as cryptographic keys from CPU cache layers $L1, L2, \text and L3$ immediately...

NoFrak

NoFrak NoFrak هو تنفيذ لإثبات المفهوم Proof of Concept لنظام Android صُمِّم لمنع هجمات fracking الموصوفة في ورقة "Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks"، بقلم Martin Georgiev وSuman Jana وVitaly Shmatikov. NDSS 2014. Cordova Android Cordova...