http-garden

The HTTP Garden HTTP Garden は、組み合わせ可能なように設定された HTTP サーバーとプロキシのコレクションであり、それらと対話して脆弱性の発見をはるかに簡単にするスクリプトも含まれています。HTTP Garden で見つけられる脆弱性のクールなデモについては、私たちの ShmooCon 2024 トーク をご覧ください。 謝辞 このプロジェクトを可能にしてくれた Galois、Trail of Bits、Narf Industries、Dartmouth College の友人たちに感謝します。 この資料は、契約番号 HR0011-19-C-0076...

kestrel-lang

.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Kestrel 위협 헌팅 언어 |readthedocs| |pypi| |downloads| |codecoverage| |black| | Hunt with Native Query/Script left or Kestrel right? 종단간 사이버 위협 헌트는 일반적으로 여러 데이터 소스/환경에서의 실행과 헌트플로우 어디서든...

udpack

UDPack UDPack은 확장 가능한 범용 UDP 패킷 난독화기입니다. 이 애플리케이션의 목적은 UDP 데이터 스트림의 경로에 위치하여 패킷을 난독화, 역난독화 또는 수정하는 것입니다. 이 스크립트는 asyncio 라이브러리를 사용하므로 Python 3.4 이상이 필요합니다. 항상 최신 Python 릴리스를 사용하는 것을 강력히 권장합니다. 기본 기능에는 서드파티 의존성이 필요 없지만, XChaCha20Poly1305Packer는 PyNaCl이 필요합니다. 경고: 이 애플리케이션의 목적이 암호화 가 아니라 난독화 라는 점을...

kit-policy

kit-policy Ruby의 Action Policy에서 영감을 받은, Kit을 위한 유연하고 합성 가능한 권한 부여 프레임워크입니다. TOC 파일 파일| 설명 ---|--- .editorconfig| 편집기 서식 구성 .gitignore| 빌드 아티팩트 및 의존성에 대한 Git 무시 규칙 .tool-versions| asdf 도구 버전 Zig, Kit LICENSE| MIT 라이선스 파일 README.md| 이 파일 examples/blog-policy.kit| 블로그 권한 부여 예제 kit.toml| 메타데이터, 작업, ...

CVE-2026-73423 Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware primitive, while actions and pages can dispatch to user code independently. Mounting actions before middleware, as in the...

Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Summary In the composable astro/hono pipeline, the security.checkOrigin protection is only installed by the middleware primitive. The actions and pages primitives each dispatch to user code independently, so a pipeline that mounts either primitive before or without middleware will bypass the orig...

GHSA-8MV7-9C27-98VC Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered

Summary In the composable astro/hono pipeline, the security.checkOrigin protection is only installed by the middleware primitive. The actions and pages primitives each dispatch to user code independently, so a pipeline that mounts either primitive before or without middleware will bypass the orig...

Tool Calling in Spring AI 2.0: A Composable, Agentic Architecture

Tool calling — the ability for an AI model to invoke application-defined functions and act on the results — is the essential building block of agentic AI systems. A model that can discover information, take action, and loop until a goal is reached is an agent. Spring AI 2.0 rearchitects tool...

Eve'S Forgery Probability from Her False Acceptance Probability: Interactive Authentication, Holevo Information and the Min-Entropy

We obtain estimates for Eve's forgery probability, namely the probability that she is able to forge a message which Alice or Bob mistakenly accept over a noisy Quantum channel for generating a shared Quantum secret key. This probability is related to Eve's success probability obtained in a previo...

Finite-Size Security of QKD: Comparison of Three Proof Techniques

We compare three proof techniques for composable finite-size security of quantum key distribution under collective attacks, with emphasis on how the resulting secret-key rates behave at practically relevant block lengths. As a benchmark, we consider the BB84 protocol and evaluate finite-size...

Optimizing Epsilon Security Parameters in QKD

We investigate the optimization of epsilon-security parameters in quantum key distribution QKD, aiming to improve the achievable secure key rate under a fixed overall composable security level. For this purpose, we employ a continuous genetic algorithm CGA to optimize the epsilon-security...

EUVD-2025-199106

Malicious code in @oku-ui/use-composable npm...

Malicious code in @oku-ui/use-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab65a88d661d76b82f009862721ca4892e3243b91a6ac493c1f09613cf76955 The package @oku-ui/use-composable was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49341 Malicious code in mercury-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0bbe9358cdd9f785cb91ea194f7e1e9ffa315bca07c6894651b5cfb45b865 The package mercury-composable was found to contain malicious code...

Malicious code in mercury-composable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0bbe9358cdd9f785cb91ea194f7e1e9ffa315bca07c6894651b5cfb45b865 The package mercury-composable was found to contain malicious code...

EUVD-2025-37540

Malicious code in mercury-composable npm...

EUVD-2021-29261

Malicious code in bioql PyPI...

Incorporating Device Characterization into Security Proofs

Typical security proofs for quantum key distribution QKD rely on having some model for the devices, with the security guarantees implicitly relying on the values of various parameters of the model, such as dark count rates or detector efficiencies. Hence to deploy QKD in practice, we must establi...

Security of a Secret Sharing Protocol on the Qline

Secret sharing is a fundamental primitive in cryptography, and it can be achieved even with perfect security. However, the distribution of shares requires computational assumptions, which can compromise the overall security of the protocol. While traditional Quantum Key Distribution QKD can...

CVE-2024-39597 [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce

In SAP Commerce, a user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B site for which early login and registration is activated, without requiring the merchant to approve the account beforehand. If the site is not configured as isolated site, this ca...