security-interview-questions

Sources QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

Data-Shield_IPv4_Blocklist

Data-Shield IPv4 Blocklists Two complete lists. Clear choices. Controlled updates. Data-Shield provides maintained IPv4 blocklists for inbound filtering on firewalls, gateways and web application firewalls. Choose the policy that fits your environment, import its raw URL, and review its effect on...

hive

From WikiLeaks: Today, 9 November 2017, WikiLeaks publishes the source code and development logs to Hive, a major component of the CIA infrastructure to control its malware. Hive solves a critical problem for the malware operators at the CIA. Even the most sophisticated malware implant on a targe...

CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE Proof-Of-Concept Apr 10, 2017 Do you still have telnet enabled on your Catalyst switches? Think twice, here’s a proof-of-concept remote code execution exploit for Catalyst 2960 switch with latest suggested firmware. Check out the exploit code here. What follows is...

alignment-cage-challenge-2

Alignment of Autonomous Cyber Defense Agents via Adaptive Policy Shaping Code for our paper Alignment of Autonomous Cyber Defense Agents via Adaptive Policy Shaping. This repository extends CybORG CAGE Challenge 2 to study how autonomous defenders can be steered towards operational priorities whi...

Alignment of Autonomous Cyber Defense Agents Via Adaptive Policy Shaping

Cybersecurity operators increasingly encounter sophisticated and fast-paced attacks, making autonomous cyber defense ACD a critical approach for supporting timely and effective decision-making. Reinforcement learning RL-based ACD agents have the ability to autonomously observe network states and...

A Security Meta-Model for Retrieval-Augmented Generation Systems

Retrieval-Augmented Generation RAG systems extend large language models LLMs with external knowledge through a multi-stage pipeline. While this architecture can improve the factual grounding of generated answers, it introduces structural attack surfaces that extend beyond those of standalone LLMs...

Xen Hypervisor DMOP Compromise

The vulnerability of the DMOP call processing code in Xen hypervisors is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-109430

Уязвимость локального сервера лицензирования Cisco License On-Prem ранее Cisco Smart Software Manager On-Prem SSM On-Prem связана с ошибками проверки криптографической подписи. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность,...

PT-2026-111235

Уязвимость микропрограммного обеспечения сетевых устройств Cisco Meraki связана с некорректным вычислением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

PT-2026-109428

Уязвимость локального сервера лицензирования Cisco License On-Prem ранее Cisco Smart Software Manager On-Prem SSM On-Prem связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостнос...

CVE-2026-93952 Security Advisory 0183

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

ROS-20260922-73-0070

The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260922-73-0052

The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0069

The vulnerability of the amdgpugarttableramfree function in the drivers/gpu/drm/amd/amdgpu/amdgpugart.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a...

ROS-20260922-73-0068

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

ROS-20260922-73-0039

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

ROS-20260922-73-0097

The vulnerability of the dpsdpmessagedebugfswrite function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the copying of buffers without checking the size of the...

ROS-20260922-73-0066

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s parallel port is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...