Apache Tomcat - Open Redirect

Apache Tomcat versions prior to 9.0.12, 8.5.34, and 7.0.91 are prone to an open-redirection vulnerability because it fails to properly sanitize user-supplied input. id: CVE-2018-11784 info: name: Apache Tomcat - Open Redirect author: geeknik severity: medium description: | Apache Tomcat versions...

gardyn

الملخص في فبراير 2025، أجريت بحثاً أمنياً على جهاز Gardyn Home 4.0. وخلال بحثي، اكتشفت ثغرات أمنية متعددة وممارسات أمنية رديئة. ومن خلال استغلال هذه الثغرات، قد يتمكن المهاجم من الحصول على وصول على مستوى النظام إلى جهاز Gardyn واستخدامه لشن هجمات إضافية ضد الشبكة المحلية المتصل بها. كما قد يستخدم...

awesome-latency-attacks

Awesome Deep Learning Latency Attacks & Defenses Ce dépôt est maintenu comme ressource complémentaire de l'étude « Deep Learning Latency Attacks and Defenses: A Cross-Domain Survey ». Il recense des articles, des liens vers du code, des notes de taxonomie et des figures sur les menaces d'atteinte...

ECC_Attacks

Attaques connues sur la cryptographie à courbes elliptiques Introduction Introduction aux courbes elliptiques Les courbes elliptiques dans le contexte de la cryptographie Attaques ECC Attaques ECDH L'ordre du générateur est trop petit L'ordre du générateur est un nombre lisse L'ordre du générateu...

gopacket

gopacket Par Jacob Paullus @psycep Une implémentation complète en Go de Impacket - 63 outils et 24 packages de bibliothèque pour l'interaction avec les protocoles réseau Windows, l'énumération Active Directory et l'exécution d'attaques. Conçu comme un framework Go natif afin que vous puissiez...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ étend les capacités de scan actif et passif de Burp Suite. Conçu pour ajouter une charge réseau minimale, il identifie les comportements applicatifs susceptibles d'intéresser les testeurs avancés : Attaques potentielles sur l'en-tête Host empoisonnement de réinitialisati...

active-scan-plus-plus

ActiveScan++ ActiveScan++ étend les capacités de scan actif et passif de Burp Suite. Conçu pour ajouter une charge réseau minimale, il identifie les comportements applicatifs susceptibles d'intéresser les testeurs avancés : Attaques potentielles sur l'en-tête Host empoisonnement de réinitialisati...

BARE-AI: Bit-Flip Attack Resilience in AI Hardware through Built-In Performance Monitors

Deep Neural Networks DNNs are integral to many safety critical systems, yet they remain highly vulnerable to bit-flip attacks BFAs, where a few memory level perturbations can drastically degrade accuracy. Existing defenses incur significant hardware overhead, depend on retraining, or fail against...

Secure Speculative Decoding for Large Language Models

Speculative decoding accelerates inference for a large language model LLM, referred to as the target model, by first using a smaller model, referred to as the draft model, to generate candidate tokens and then verifying them with the target model for acceptance or rejection. Prior studies primari...

Cisco ASA Inconsistent Interpretation of HTTP Requests (CVE-2022-20713)

A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct browser-based attacks against users of an affected device. This vulnerability is du...

CentOS Linux 8 [TuxCare] Security Update: python3-unbound / unbound / unbound-devel / unbound-libs Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791261872)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791261872 advisory. - In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading...

credential-attacks-toolkit

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

SPOILER

SPOILER: مخاطر التحميل التخميني تعزز هجمات Rowhammer والكاش CVE-2019-0162 INTEL-SA-00238 https://www.usenix.org/system/files/sec19-islam.pdf @inproceedings 236252, author = Saad Islam and Ahmad Moghimi and Ida Bruhns and Moritz Krebbel and Berk Gulmezoglu and Thomas Eisenbarth and Berk Sunar, tit...

meshdeck

meshdeck منفذ MeshDeck لنظام Arch Linux ARM - Wilson تم نقل هذا المنفذ في الأصل إلى مستودع Wilson لنظام Arch Linux ARM. يتم دمج مستودع Wilson مع مشروع ArchAssault http://www.archassault.org نظرًا لوجود تداخل وأهداف مشتركة. جميع الأعمال الأصلية/المنبع من إعداد الدكتور فيليب بولسترا. مأخوذ من صفحته...

CVE-2024-57427

CVE-2024-57427 - ثغرة XSS المنعكسة PHPJabbers Cinema Booking System v2.0 عرضة لثغرة البرمجة النصية عبر المواقع المنعكسة XSS. تتعامل نقاط نهاية متعددة مع إدخال المستخدم بشكل غير سليم، مما يسمح بتنفيذ سكربتات خبيثة في متصفح الضحية. يمكن للمهاجمين إنشاء روابط خبيثة لسرقة ملفات تعريف الارتباط الخاصة...

Astra Linux – Vulnerability in Node.js

A OS command injection vulnerability exists in Node.js versions 14.20.0, 16.20.0, 18.5.0 due to an insufficient IsAllowedHost check. This vulnerability can be easily exploited, as the IsIPAddress function does not properly check whether an IP address is invalid before making DBS requests, thereby...

Astra Linux – Vulnerability in wpa

Implementations of SAE in hostapd before version 2.10, and wpasupplicant before version 2.10, are vulnerable to side-channel attacks due to cache access patterns. NOTE: This issue exists due to an incomplete fix for CVE-2019-9494...

CVE-2026-97071

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071

The VillaTheme CURCY (woo-multi-currency) WordPress plugin versions up to and including 2.2.17 is vulnerable to an Incorrect Calculation vulnerability (CWE-682). This flaw allows for Integer Attacks , potentially impacting the integrity of data during currency calculations. No specific exploitati...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...