CS-Cart-Vulns

It is an offensive tool for e-commerce platforms. The repository...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

Exploit tailored for HackTheBox Pilgrimage Automatic python...

OESA-2025-1893 tomcat security update

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Security Fixes: Concurrent Execution using Shar...

KD-GAT: Combining Knowledge Distillation and Graph Attention Transformer for a Controller Area Network Intrusion Detection System

The Controller Area Network CAN protocol is widely adopted for in-vehicle communication but lacks inherent security mechanisms, making it vulnerable to cyberattacks. This paper introduces KD-GAT, an intrusion detection framework that combines Graph Attention Networks GATs with knowledge...

Securing the Internet of Medical Things (IoMT): Real-World Attack Taxonomy and Practical Security Measures

The Internet of Medical Things IoMT has the potential to radically improve healthcare by enabling real-time monitoring, remote diagnostics, and AI-driven decision making. However, the connectivity, embedded intelligence, and inclusion of a wide variety of novel sensors expose medical devices to...

Malicious Windows Registration Entries (.reg) File

This module creates a Windows Registration Entries .reg file which adds the specified payload to the Windows Registry. The payload runs upon Windows login for the current user. If the user has elevated privileges when opening the file, the payload will run upon login when any user logs in. The us...

Evaluating Ensemble and Deep Learning Models for Static Malware Detection with Dimensionality Reduction Using the EMBER Dataset

This study investigates the effectiveness of several machine learning algorithms for static malware detection using the EMBER dataset, which contains feature representations of Portable Executable PE files. We evaluate eight classification models: LightGBM, XGBoost, CatBoost, Random Forest, Extra...

MeAJOR Corpus: a Multi-Source Dataset for Phishing Email Detection

Phishing emails continue to pose a significant threat to cybersecurity by exploiting human vulnerabilities through deceptive content and malicious payloads. While Machine Learning ML models are effective at detecting phishing threats, their performance largely relies on the quality and diversity ...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770 SharePoint Deserialization RCE PoC Critica...

Dippyis Insecure Direct Object Reference / Brute Force

Dippyis a popular website to chat with millions of proactive AI characters. The Dippy chat suffers from an insecure direct object reference vulnerability. Conversation histories for all users are stored on the server. However, Dippy's server does not distinguish the ownership or sharing status of...

An Adversarial-Driven Experimental Study on Deep Learning for RF Fingerprinting

Radio frequency RF fingerprinting, which extracts unique hardware imperfections of radio devices, has emerged as a promising physical-layer device identification mechanism in zero trust architectures and beyond 5G networks. In particular, deep learning DL methods have demonstrated state-of-the-ar...

Challenges in GenAI and Authentication: a Scoping Review

Authentication and authenticity have been a security challenge since the beginning of information sharing, especially in the context of digital information. With the advancement of generative artificial intelligence, these challenges have evolved, demanding a more up-to-date analysis of their...

Using Modular Arithmetic Optimized Neural Networks to Crack Affine Cryptographic Schemes Efficiently

We investigate the cryptanalysis of affine ciphers using a hybrid neural network architecture that combines modular arithmetic-aware and statistical feature-based learning. Inspired by recent advances in interpretable neural networks for modular arithmetic and neural cryptanalysis of classical...

Multi-Granular Discretization for Interpretable Generalization in Precise Cyberattack Identification

Explainable intrusion detection systems IDS are now recognized as essential for mission-critical networks, yet most "XAI" pipelines still bolt an approximate explainer onto an opaque classifier, leaving analysts with partial and sometimes misleading insights. The Interpretable Generalization IG...

ExCyTIn-Bench: Evaluating LLM Agents on Cyber Threat Investigation

We present ExCyTIn-Bench, the first benchmark to Evaluate an LLM agent x on the task of Cyber Threat Investigation through security questions derived from investigation graphs. Real-world security analysts must sift through a large number of heterogeneous alert signals and security logs, follow...

Exploit for OS Command Injection in Magnussolution Magnusbilling

🧠 TryHackMe Room Walkthrough: Billing Room Link: htt...

A Login Page Transparency and Visual Similarity Based Zero Day Phishing Defense Protocol

Phishing is a prevalent cyberattack that uses look-alike websites to deceive users into revealing sensitive information. Numerous efforts have been made by the Internet community and security organizations to detect, prevent, or train users to avoid falling victim to phishing attacks. Most of thi...

Exploiting Leaderboards for Large-Scale Distribution of Malicious Models

While poisoning attacks on machine learning models have been extensively studied, the mechanisms by which adversaries can distribute poisoned models at scale remain largely unexplored. In this paper, we shed light on how model leaderboards -- ranked platforms for model discovery and evaluation --...

cve

...

The Trust Fabric: Decentralized Interoperability and Economic Coordination for the Agentic Web

The fragmentation of AI agent ecosystems has created urgent demands for interoperability, trust, and economic coordination that current protocols -- including MCP Hou et al., 2025, A2A Habler et al., 2025, ACP Liu et al., 2025, and Cisco's AGP Edwards, 2025 -- cannot address at scale. We present...