65722 matches found
jvmxray
JVMXRay: Java Application Security Monitoring Duke history Documentation | Changes from Upstream | Project Blog JVMXRay monitors Java applications in real-time via bytecode injection, detecting vulnerabilities and suspicious activity without code changes. 19 modular sensors track file access,...
exploit_mitigations
Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...
lunar
LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...
tools-python
用于解析、验证和创建 SPDX 文档的 Python 库 CI 状态（Linux、macOS 和 Windows）： 破坏性变更 v0.7 - v0.8 请注意，即将发布的 0.8 版本为迎接即将到来的 SPDX v3.0 版本进行了重大重构，导致 API 出现破坏性变更。 请参考 迁移指南 来更新您现有的代码。 v0.8 的主要特性包括： 针对 v2.2 和 v2.3 规范对 SPDX 文档进行全面验证 支持 SPDX 的 RDF 格式，并包含所有 v2.3 特性 对即将推出的 SPDX v3 规范的实验性支持。但请注意，目前该支持既不完整也不稳定，因为该规范仍在演进中。与 SPDX3...
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export
includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...
WordPress OneTone theme <= 3.0.6 – Unauthenticated Options Changes
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes. id: CVE-2019-17230 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Options Changes author: daffainfo severity: medium description: | includes/theme-functions.php in...
pe-sieve
Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...
get-pixels-updated
Esta es una versión actualizada de get-pixels que corrige la vulnerabilidad de seguridad CVE-2020-8175. En el momento de su creación, todos los archivos son los mismos que los del repositorio original, a excepción del package.json. get-pixels-updated Lo siguiente es de la página de GitHub de . Co...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: hwmon: coretemp Simplified platform device handling Coretemp’s platform driver is unconventional. All the actual processing is performed globally by the initcall and CPU hotplug notifiers. The “driver” essentially just wraps t...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: gve: Fixed corruption in the stats report when the number of queues changes. The driver and the Network Interface Card NIC share a memory region for stats reporting. The NIC calculates its offset within this region based on the...
CVE-2013-3900_Remediation_PowerShell
CVE-2013-3900修复PowerShell 用于修改注册表以修复CVE-2013-3900的脚本。它提供了撤销选项，以防对您的环境造成影响。 步骤 下载脚本，以管理员权限运行，然后重启机器。...
EUVD-2026-42683
@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft...
CVE-2026-49992 Kimai: Login CSRF in Default Team Creation Endpoints Allows Unauthorized Team and Permission Structure Changes
Kimai is an open-source time tracking application. Versions prior to 2.58.0 contain authenticated cross-site request forgery issues in their default team creation shortcuts for projects, customers, and activities. These endpoints are exposed through GET routes and directly create or reuse a Team,...
Invoke-DCSync
Invoke-DCSync Invoke-DCSync 参考：https://adsecurity.org/?p=1729 参考：https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ 目标：使用 mimikatz DCSync 功能从域控制器检索所有用户账户的密码哈希 警告：仅在实验环境中执行此操作。 mimikatz 实现了一个名为 DCSync 的工具，这使 mimikatz 能够模拟域控制器，并尝试从另一个域控制器检索所有密码哈希。 你可能需要禁用 Windows Defender...
security_monkey
NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...
CVE-2026-89054 OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes
A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...
CVE-2026-89054 OpenNMS missing authorization on /api/v2 PATCH endpoints allows unauthenticated configuration changes
A missing authorization vulnerability in OpenNMS Horizon allows configuration changes without authentication. The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH, so the shipped @PATCH configuration endpoints for event configuration a...
CVE-2026-89054
CVE-2026-89054 is a missing authorization vulnerability in OpenNMS Horizon . The Spring Security policy for the /api/v2 REST API defines authorization rules for every HTTP method except PATCH , leaving the shipped @PATCH endpoints for event configuration and SNMP data collection accessible withou...
CVE-2026-88860
Capgo , an OTA update platform, is affected by an authorization bypass caused by stale channel permission overrides. When a user's last organization role binding is deleted, Capgo fails to clean up associated channel-level permission overrides, leaving them active. An attacker with a previously r...
