cfgrip

cfgrip PE/ELF x86/x64 CFG-Extraktor. Nimmt eine Binärdatei entgegen, zerlegt sie, löst jeden Sprung und Aufruf auf GOT, Sprungtabellen, Registerverfolgung und exportiert den vollständigen Kontrollflussgraphen als strukturiertes JSON. warum Du musst genau wissen, wohin jeder Zweig führt. Nicht zum...

CVE-2026-19200

Velociraptor 's verify() VQL function suffers from an implementation fault that causes it to use the global artifact repository instead of a scoped one. This allows a user with only the NOTEBOOK_EDIT permission (e.g., an analyst role) to overwrite existing live built-in artifacts without the perm...

awesome-industrial-control-system-security

awesome-industrial-control-system-security Una lista curata di risorse relative alla sicurezza dei Sistemi di Controllo Industriale ICS. Sentiti libero di contribuire. Strumenti...

ICS-Security-Tools

Strumenti, Suggerimenti e Trucchi del Mestiere per la Sicurezza ICS Sviluppato come risorsa comunitaria Questo progetto intende riunire strumenti, suggerimenti e trucchi del mestiere per lavorare sulla cybersicurezza nell'ambiente ICS. Il repository di codice ospiterà script, strumenti,...

Vision-MSI-Thermal-Control

Vision MSI Controllo Termico Gestione termica Linux per MSI Modern 15H AI C1MG-096IT - Controllo EC con reverse engineering, profili ventola e soglia di carica batteria 🎯 Scopo del Progetto Questa applicazione è nata dalla necessità degli utenti di laptop MSI su Linux. Il percorso è iniziato quan...

hinge-command-control-c2

हिंज को कमांड एंड कंट्रोल सर्वर के रूप में उपयोग करना कृपया देखें https://mattwie.se/hinge-command-control-c2...

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

lua-resty-limit-traffic

Nome lua-resty-limit-traffic - Libreria Lua per limitare e controllare il traffico in OpenResty/ngxlua Indice Nome Stato Sinossi Descrizione Installazione Comunità Mailing list in inglese Mailing list in cinese Bug e patch Autore Copyright e licenza Vedi anche Stato Questa libreria è già...

minicps

MiniCPS MiniCPS è un framework per la simulazione in tempo reale di sistemi cyber-fisici. Include supporto per la simulazione di processi fisici e dispositivi di controllo, e per l'emulazione di rete. È costruito sopra mininet. MiniCPS è sviluppato dal gruppo SCy-Phy della SUTD Singapore Universi...

oathkeeper

Chat · Discussioni · Newsletter · Documentazione · Prova Ory Network · Lavora con noi Ory Oathkeeper è un Identity & Access Proxy IAP e un'API per le decisioni di controllo degli accessi che autorizza le richieste HTTP sulla base di insiemi di regole di accesso. Segue il modello BeyondCorp...

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

CVE-2026-78204

Ghostwriter through version 7.2.6 is missing per-object authorization on its report template lint endpoints . The underlying cause is that RoleBasedAccessControlMixin.test_func only checks request.user.is_active unless a view explicitly overrides it, and neither the lint endpoint nor the stored-l...

EUVD-2026-64679

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

EUVD-2026-64678

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...

CVE-2026-78203

Ghostwriter before 7.1.2 contains a cross-client authorization flaw in the report template swap endpoint . The endpoint fails to validate template ownership, and because template primary keys are sequential, an authenticated attacker can enumerate and attach templates belonging to other clients t...

PT-2026-79838

Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...

PT-2026-81045

Name of the Vulnerable Software and Affected Versions Style Kits versions prior to 2.6.6 Description Broken Access Control allows a user with Subscriber privileges to perform unauthorized actions. Recommendations Update Style Kits to version 2.6.6 or later...

PT-2026-80825

Name of the Vulnerable Software and Affected Versions Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More versions prior to 1.7.2 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions...

Cisco Catalyst SD-WAN Manager Information Disclosure (cisco-sa-sdwan-infodis-SPuJBDCe)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An information disclosure vulnerability exists in the web-based management interface of Cisco Catalyst SD-WAN Manager due to insufficient access control enforcement for specific template types...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...