Clustering Local File Inclusion

Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 is affected by a directory traversal vulnerability. This attack can cause the disclosure of critical secrets stored anywhere on the system and can significantly aid in getting remote code access. id: CVE-2021-43496 inf...

Unlearnable-Clusters

Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples Código relativo a "Unlearnable Clusters: Towards Label-agnostic Unlearnable Examples", CVPR2023. Preprocesamiento Primero, ejecuta preprocess.py para renombrar el directorio del conjunto de datos. root@kitploit: python preprocess.p...

CVE-2026-34486

CVE-2026-34486 Bypass de fail-open en EncryptInterceptor en el clustering de Apache Tomcat Tribes que conduce a RCE no autenticado mediante deserialización de Java. Afecta: 11.0.19+, 10.1.53+, 9.0.116+. Corregido en: 11.0.21, 10.1.54, 9.0.117. Encontrado y reportado por Bartlomiej Dmitruk...

Firmware_Slap

Firmware Slap Firmware Slap 将 concolic 分析与函数聚类相结合，用于固件中的漏洞发现和函数相似性分析。Firmware Slap 以一系列库的形式构建，并将大部分信息以 pickle 或 JSON 格式导出，以便与其他工具集成。 该演讲的幻灯片可在此处找到：链接 安装 Firmware Slap 应在虚拟环境中运行。已在 Python3.6 上测试通过。 root@kitploit: sudo apt install python3-virtualenv virtualenv -p python3 fwslap source...

telfhash

Trend Micro ELF哈希 telfhash telfhash 是针对 ELF 文件的符号哈希，就像 imphash 是 PE 文件的导入哈希一样。通过 telfhash，你可以根据符号对 ELF 文件进行聚类。这对于对恶意样本进行聚类特别有用。如果样本没有符号，telfhash 会使用其调用地址的目标来模拟一个符号列表。更多信息请参见 资源 部分。 安装 pip 最简单的让 telfhash 工作的方法是通过 pip 安装它： pip install telfhash 手动 要求 telfhash 在生成哈希时使用 TLSH。为了 telfhash 正常工作，必须在你的系统中安...

cosa-nostra

Cosa Nostra Cosa Nostra 是一个专注于恶意软件分析的开源软件聚类工具包。它能够为结构相似的二进制恶意软件样本构建系统发育树。该工具最初在 2016 年上海 SyScan360 大会上发布。 自 2016 年以来，我一直在维护它，用户只有一位，恰好是我的一个朋友……好吧。 快速入门 必需的第三方工具 要使用 Cosa Nostra，你需要一个 Python 3.X 版本，以及以下工具之一来执行代码分析： IDA 使用 C++ 编写。它支持分析你可能从未听说过的多种可执行文件类型。商业产品。目前仅支持 7.X 版本。 Radare2 使用纯 C 语言编写。与 IDA...

permhash

Permhash es un marco extensible para calcular el hash de los permisos declarados aplicados a las extensiones de navegador basadas en Chromium y a los APK, lo que permite agrupamiento, búsqueda y pivoteo similar al hash de importaciones y al hash de cabeceras rich. Permhash actualmente es capaz de...

BIT-TOMCAT-2026-34487 Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token

Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering component of Apache Tomcat exposed the Kubernetes bearer token. This issue affects Apache Tomcat: from 11.0.0 through 11.0.20, from 10.1.0 through 10.1.53, from 9.0.13 through 9.0.116. Users are...

HTTP-Basma

Fingerprinting Adaptativo: Sondeo Multi-Etapa de HTTP-Basma para la Diferenciación Granular de Servidores HTTP-Basma está disponible en https://httpbasma.netomize.ca/ Introducción En el ámbito de la ciberseguridad, identificar y caracterizar con precisión los servidores web es crucial para la...

cve-2026-25854

CVE-2026-25854 — Redirección abierta ocasional Descubridor: gregk4sec https://github.com/gregk4sec/cve Fecha de descubrimiento: 2026-01-30 Vendor afectado: Apache Producto afectado: Tomcat 11.0.x / 10.1.x / 9.x Severidad: 6.1 Media CWE: CWE-601 Redirección de URL a sitio no confiable 'Open...

Cooper-ndss-2022

Cooper: Pruebas del código de enlace de lenguajes de script mediante mutación cooperativa Cooper utiliza mutación cooperativa para probar el código de enlace de los lenguajes de script y encontrar problemas de seguridad de memoria. La mutación cooperativa modifica simultáneamente el código de los...

CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization

CVE-2026-34486 Derivación de fail-open en EncryptInterceptor en el clustering de Apache Tomcat Tribes que conduce a RCE no autenticado mediante deserialización de Java. Afectados: 11.0.19+, 10.1.53+, 9.0.116+. Corregido en: 11.0.21, 10.1.54, 9.0.117. Descubierto y reportado por Bartlomiej Dmitruk...

GHSA-73WF-GQ98-2V4G vulnerabilities

Vulnerabilities for packages: langfuse, vitess, ts-patch...

EUVD-2026-64849

The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loadsjoblib.loadstrmodelfile and so executes arbitrary Python while loading a model file. Loading a model supplied by an attacker therefore runs that...

Astra Linux – Vulnerability in Tomcat9

The documentation for Apache Tomcat versions 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62, and 8.5.38 to 8.5.78 states that the EncryptInterceptor enables Tomcat clustering to run over an untrusted network. However, this is incorrect. While the EncryptInterceptor does provide...

EUVD-2026-62910

In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundle Representational State Transfer REST API to write files to locations that the user account running Splunk Enterprise can writ...

CVE-2026-76354 Path Traversal through Search Head Clustering in Splunk Enterprise

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability by sending a crafted Representational State Transfer REST API request that deletes or temporarily overwrites files...

CVE-2026-76345

CVE-2026-76345 is a remote code execution vulnerability in Splunk Enterprise versions below 10.4.2 (also affecting 10.2.x, 10.0.x, and 9.4.x branches). The search head cluster member bundle REST API fails to enforce its expected authorization boundary and does not validate bundle paths before acc...

CLEANSTART-2026-VQ70387 Security fixes in hazelcast 5.7.0-r1

Package hazelcast version 5.7.0-r1 fixes 107 vulnerabilities: ghsa-j3rv-43j4-c7qm, ghsa-rmj7-2vxq-3g9f, ghsa-5gvw-p9qm-jgwh, ghsa-5jmj-h7xm-6q6v, ghsa-5hh8-q8hv-fr38...

jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...