SharpGmailC2

SharpGmailC2 我们友好的 Gmail 将充当服务器，植入程序将通过 SMTP 渗出数据，并通过 IMAP 协议从 C2（Gmail）读取命令。 免责声明： 自 2022 年 11 月 29 日 起，此项目无法绕过 Windows Defender。该工具现已被 MS Windows 标记为 virtool:msil/ "shgmailz." a!mtb。不过，我计划在不久的将来将此项目升级为名为 SharpGmailC2V2 的新版本。 🚫 免责声明：本项目仅用于教育/测试目的 。在未经授权的机器 上使用严格禁止 。如发现有人将其用于非法/恶意意图 ，仓库作者将不 承担任何责...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

egg-scripts-CVE-2018-3786

egg-scripts 用于 egg 项目的部署工具。 注意：Windows 部分支持，详见22 安装 $ npm i egg-scripts --save 使用 将 eggctl 添加到 package.json 的 scripts 中： "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" 然后执行： npm start npm stop 注意： 不建议全局安装 egg-scripts，应将其作为 npm scripts 安装并使用。 命令 start 以生产模式启动 egg。 $ eggctl star...

python: python: Arbitrary file deletion via race condition during temporary directory cleanup

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.8-1.hum1 noarch python3-3.14.8-1.hum1 aarch64, x8664 python3-debug-3.14.8-1.hum1 aarch64, x8664 python3-devel-3.14.8-1.hum1 aarch64, x8664...

CVE-2026-80298

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affects Sef - AI Chatbot Platform: before 2.1. NOTE: The vendor was contacted and it was learned that the product is not...

DeTTECT

检测战术、技术与对抗威胁 最新版本：2.2.0 要开始使用 DeTT&CT，请查看以下资源之一： Wiki 上的这个页面。 NVISO 的 Renaud Frère 撰写的这篇博客对 DeTT&CT 的功能进行了全面且最新的描述。 博客：mbsecure.nl/blog/2019/5/dettact-mapping-your-blue-team-to-mitre-attack 或 博客：siriussecurity.nl/blog/2019/5/8/mapping-your-blue-team-to-mitre-attack。 视频 我们在 hack.lu 2019 上的演讲。 Just...

Automated-scanner-CVE-2026-41940

CPANEL CVE EXPLOIT 英文 | فارسی 波斯语 ██████╗██████╗ █████╗ ███╗ ██╗███████╗██╗ ██╔════╝██╔══██╗██╔══██╗████╗ ██║██╔════╝██║ ██║ ██████╔╝███████║██╔██╗ ██║█████╗ ██║ ██║ ██╔═══╝ ██╔══██║██║╚██╗██║██╔══╝ ██║ ╚██████╗██║ ██║ ██║██║ ╚████║███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═╝╚═╝ ╚═══╝╚══════╝╚══════╝...

CVE-2026-64638

CVE-2026-64638 — XSS2Shell:WordPress 登录页预认证 XSS → 服务器 RCE HackSpeak 分发镜像。本仓库为 WordSec 发布的 XSS2Shell 教育用途 PoCCVE-2026-64638的分发镜像 ,代码与上游一致;上游为 MIT License,Copyright c 2026 WordSec 。 ⚠️ 仅供安全研究与授权测试使用 ,仅可对本人拥有或有书面授权评估的 WordPress 站点运行;PoC 会生成并清理临时发布物,请勿针对第三方管理员或生产系统。 漏洞简述 XSS2ShellCVE-2026-64638 是...

hermes-seagull

hermes-seagull !CIhttps://github.com/ly1123245599/hermes-...

frida v17.20.0

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

Malicious code in gocommunity.io/orderedbtree (Go)

Part of the Graphalgo campaign. The module, first published around 2026-08-11, contains a second-stage remote access trojan in plaintext that runs automatically. The RAT collects system information, executes decrypted Go or JavaScript payloads, and polls two command-and-control channels every 3-1...

NexaCorp-DFIR-INC-2026-001

NexaCorp DFIR：INC-2026-001 - Linux 基础设施入侵 针对 NexaCorp 基础设施模拟入侵的 DFIR 调查与检测工程。作为为期 4 天的单人项目（BeCode Brussels 蓝队与红队训练营，任务 01）开展。交付物为一份 54 页的调查结果报告（PDF）以及 7 条经过验证的 Suricata 规则，可在 PCAP 重放中捕获该入侵事件。 本仓库记录了作为 BeCode 网络安全训练营（2025-2026 届）一部分执行的 SOC 分析师项目。它从网络和日志证据重建了一次完整的入侵，并交付一组经过验证的 Suricata 检测规则。这是...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF 任意文件写入到 RCE PoC 推导过程与思考 适用范围：仅用于本地靶场、授权复现环境、漏洞验证和防护规则分析。不要对未授权目标使用。本文主要分析 CVE-2026-20230 的利用链条、可验证现象、判断逻辑和防护思路，不提供可直接复制执行的攻击报文、WebShell 内容或命令执行载荷。 1. 漏洞背景 CVE-2026-20230 是 Cisco Unified Communications Manager（Unified CM / CUCM）和 Cisco...

Security update for helm

This update for helm fixes the following issues: CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction bsc1281104. CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal...

Security update for python-anyio

This update for python-anyio fixes the following issues: CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing bsc1281476. CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr bsc1281475. Patch Instructions: To install...

CVE-2026-91784

cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker can create a process with a crafted name beginning with -- e.g. containing a target user's UID. When the user running...

Important: Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

A flaw was found in Podman. When a container image with checkpoint annotations is executed using the podman run command, Podman treats the image as a restored checkpoint and ignores user-specified sandboxing options, such as dropped privileges. An attacker can exploit this issue by enticing a use...