46781 matches found
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...
CVE-2024-3094-info
CVE-2024-3094-情報 https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin の返答 https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...
[SECURITY] [DLA 4766-1] cyrus-imapd security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4766-1 [email protected] https://www.debian.org/lts/security/ Xavier Guimard September 01, 2026 https://wiki.debian.org/LTS -...
5 Million WordPress Sites Affected by SQL Injection Vulnerability in All-in-One WP Migration and Backup WordPress Plugin
On August 14th, 2026, we received a submission for an Unauthenticated Second-Order SQL Injection vulnerability in All-in-One WP Migration and Backup, a WordPress plugin with more than 5 million active installations. This vulnerability makes it possible for unauthenticated attackers to inject SQL...
Exploit for Deserialization of Untrusted Data in Apache Activemq
CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-des...
CVE-2026-82661
A flaw was found in Nodemailer, an email sending library. This vulnerability allows a remote attacker with control over specific list comment parameters to inject arbitrary message headers into generated email messages. By failing to sanitize carriage return and line feed CRLF characters, an...
xlsx
SheetJS SheetJS Community Editionは、実戦で検証されたオープンソースソリューションを提供し、ほぼすべての複雑なスプレッドシートから有用なデータを抽出し、レガシーおよび最新のソフトウェアの両方で動作する新しいスプレッドシートを生成します。 SheetJS Proは、データ処理を超えたソリューションを提供します。複雑なテンプレートを簡単に編集。スタイリングで内なるピカソを解き放ちましょう。画像/グラフ/ピボットテーブルを使ったカスタムシートの作成。数式の評価と計算のWebアプリへの移植。一般的なスプレッドシートタスクの自動化など、さらに多くの機能があります。...
LLM4Decompile
📊 結果 | 🤗 モデル | 🚀 クイックスタート | 📚 HumanEval-Decompile | 📎 引用 | 📝 論文 | 🖥️ Colab | ▶️ YouTube リバースエンジニアリング: 大規模言語モデルによるバイナリコードの逆コンパイル 更新情報 2025-10-04: SK²Decompileをリリース: スケルトンからスキンへのLLMベースの二段階バイナリ逆コンパイル。フェーズ1 構造復元（スケルトン）: バイナリ/疑似コードを難読化された中間表現に変換 🤗 HF Link。フェーズ2 識別子命名（スキン）: 意味のある識別子を持つ人間が読めるソースコードを生成 🤗...
awesome-ai-security — Updated!
awesome-ai-security A curated list of AI Security materials and resources for Pentesters, Bug Hunters, and Security Researchers. root@kitploit: If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the...
Debian dla-4766 : cyrus-admin - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4766 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4766-1 [email protected]...
PT-2026-84308
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause read reply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causin...
PT-2026-84356
Name of the Vulnerable Software and Affected Versions OpenAI Codex CLI affected versions not specified OpenAI Codex Desktop affected versions not specified Description OpenAI Codex CLI and Codex Desktop automatically collect Git repository metadata without disabling the core.fsmonitor setting. If...
PT-2026-84513
A few highlights: CVE-2026-77089 : Command Center API Auth Bypass, disclosure/availability risk, 9.3 CVSS CVE-2026-77103 : CommServe auth bypass, information disclosure risk, 8.7 CVSS CVE-2026-77104 : CommServe path traversal, information disclosure risk, 8.3 CVSS CVE-2026-77101 : CommServe buffe...
miniOrange 5.4.3 - Unauthenticated Auth Bypass
Exploit Title: miniOrange 5.4.3 - Unauthenticated Auth Bypass Google Dork: inurl:/wp-content/plugins/miniorange-saml-20-single-sign-on/ Date: 2026-07-27 Exploit Author: zer0dayf Vendor Homepage: https://plugins.wordpress.org/miniorange-saml-20-single-sign-on/ Software Link:...
PT-2026-84518
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 Appliances affected versions not specified Description A pre-authentication Server-Side Request Forgery SSRF issue exists in the Work Place interface. This occurs due to an unintended alternate access path, allowing a remote...
PT-2026-84510
A few highlights: CVE-2026-77089 : Command Center API Auth Bypass, disclosure/availability risk, 9.3 CVSS CVE-2026-77103 : CommServe auth bypass, information disclosure risk, 8.7 CVSS CVE-2026-77104 : CommServe path traversal, information disclosure risk, 8.3 CVSS CVE-2026-77101 : CommServe buffe...
PT-2026-84174
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to...
PT-2026-84227
Name of the Vulnerable Software and Affected Versions Hugging Face Transformers versions 4.49.0 through 5.8.1 Description A consent-bypass issue exists where remote Python files are written to the local disk without user consent. This occurs when using the load custom generate function, which...
PT-2026-84511
A few highlights: CVE-2026-77089 : Command Center API Auth Bypass, disclosure/availability risk, 9.3 CVSS CVE-2026-77103 : CommServe auth bypass, information disclosure risk, 8.7 CVSS CVE-2026-77104 : CommServe path traversal, information disclosure risk, 8.3 CVSS CVE-2026-77101 : CommServe buffe...
PT-2026-84119
Name of the Vulnerable Software and Affected Versions Cobham SATCOM VSAT7090 Maritime Satellite Router versions prior to 20260704 Description Command injection is possible via remote attack in the JSON Parsing component. The issue exists within the c set reports decode function of the...