940609 matches found
phantomstars
phantomstars GitHub 上での偽エンゲージメントの自動検出と追跡 JS Labs プロジェクト — AI Slop Intelligence イニシアチブの一部。 毎日実行。不審なアカウントをすべてスコアリング。協調的なボットキャンペーンを検出。 侵害されたリポジトリに直接 issue を登録し、メンテナーが対処できるようにします。 このプロジェクトを支援する BTC 3QjWqhQbHdHgWeYHTpmorP8Pe1wgDjJy54 ETH 0x5851e6145F4773d1585b8686095FB16E368a4dA1 ZEC...
tafferugli
Tafferugli는 필터링 , 수집 및 분석 이 가능한 웹 애플리케이션 형태의 Twitter 분석 프레임워크입니다. 이는 조정된 행동 및 자동 게시 와 같은 선전 작업과 관련된 현상 분석을 용이하게 하기 위한 도구로 고안되었습니다. 이미 구현된 기본 메트릭 세트와 함께 제공되며, 약간의 파이썬 코드로 사용자 정의 메트릭을 추가할 수 있습니다. 설치 및 사용에 대한 자세한 내용은 문서를 참조하세요. 스크린샷 라이선스 Tafferugli는 AGPL-3.0 라이선스로 배포됩니다...
meshdeck
meshdeck Arch Linux ARM 向け MeshDeck ポート - Wilson これは元々 Arch Linux ARM の Wilson リポジトリに移植されました。Wilson リポジトリは ArchAssault プロジェクト http://www.archassault.org と統合されつつあります。 重複と類似した目標があるためです。 オリジナル/アップストリームはすべて、Dr. Philip Polstra によって作成されています。 彼の Sourceforge ページから: http://sourceforge.net/projects/thedeck...
Vulnerability-Disclosure-Policy
脆弱性開示ポリシー 私たちは、脆弱性の開示は相互理解が重要であると考えています。研究者だけでなく、ベンダーも協調的な脆弱性開示に参加しなければなりません。Enable Securityは独自の調査を通じて脆弱性を発見した場合、その脆弱性をベンダーに通知し、詳細は最初の連絡から90日後に防御コミュニティに公開します。ただし、ベンダーが修正プログラムをリリースした場合は、それより早く公開します。 Enable Securityは、ベンダーとの機密通信の確立に合理的な努力を払います。 ベンダーのセキュリティチームまたは指定された連絡先との連絡が確立された後、Enable...
SecureOps-Lab
SecureOps Lab - 실시간 사이버 보안 평가 개요 대학 리눅스 서버에 대한 실시간 사이버 보안 평가를 수행했습니다. 분석 중에 무차별 대입 인증 시도 및 Log4Shell CVE-2021-44228 악용 시도를 포함한 활성 공격 활동이 확인되었습니다. "조정된 IP"는 동일 서브넷에서 발생하는 여러 악성 IP 주소를 의미하며, 이는 공유된 공격 인프라 또는 시스템을 동시에 대상으로 하는 자동화된 공격 도구의 사용을 나타냅니다. 위협 분석 및 발견 사항 무차별 대입 공격 단일 외부 IP에서 144회의 실패한 SSH 로그...
CVE-2026-29116
CVE-2026-29116 — Dahua 未認証リモートサービス拒否 DoS アドバイザリ種別: ベンダー連携によるセキュリティ開示 CVE ID: CVE-2026-29116 ベンダー: Dahua Technology 公開日: 2026-06-10T06:16:34 UTC 最終更新: 2026-06-10T06:16:34 UTC ソース: Dahua Product Security Incident PSI Trust Center 目次 要点 一目でわかる 脆弱性のタイムライン 説明 技術的分析 影響を受ける製品 CVSS スコアリング 脆弱性スコアリングの詳細 CW...
security-research
security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...
Malicious code in agent-free (npm)
The npm package agent-free is malicious. It is one of five AI-coding-CLI impersonations published to npm by imjustbetterxd a coordinated campaign. On use, the CLI reads the developer's LLM/provider API key - from environment variables e.g. EXAAPIKEY, NVIDIAAPIKEY and its own config - and routes t...
CGA-7PJM-7Q7V-PC3F
Bulletin has no description...
GHSA-7GWP-5PFP-969J
creationtimestamp| type| source ---|---|--- 2026-08-18 00:32:32+00:00| seen| https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d 2026-08-21 09:24:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtlgunnc4g2v...
kernel-nday-exploits
Linux Kernel N-Day Exploits Local privilege escalation rese...
GHSA-3R53-75J5-3G7J
creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...
CVE-2026-56690
creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqc5qu5luq2o 2026-07-10 12:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc6wpo2tm2i 2026-07-10 16:49:16+00:00| seen|...
[SECURITY] Fedora 44 Update: python-pendulum-3.2.0-1.fc44
Unlike other datetime libraries for Python, Pendulum is a drop-in replacement for the standard datetime class it inherits from it, so, basically, you can replace all your datetime instances by DateTime instances in you code. It also removes the notion of naive datetimes: each Pendulum instance is...
Exploit for CVE-2026-13768
CVE-2026-13768: Privileged IoT Hub Credential — Fleet Enumerat...
CVE-2026-11541
creationtimestamp| type| source ---|---|--- 2026-06-30 22:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk34s2k5x2u 2026-07-01 02:51:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpkj56ehry2l 2026-07-02 01:31:56+00:00| seen|...
CVE-2026-13487
creationtimestamp| type| source ---|---|--- 2026-06-28 13:22:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpe2y3obci2v 2026-06-28 14:35:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe72l5y2323 2026-06-29 19:46:18+00:00| seen|...
JLSEC-2026-617 Open redirect in the HTTP.jl static file server canonical redirects
Description The static file server's canonical 301 redirects index-file strip, directory trailing-slash add, and file trailing-slash strip built the Location header verbatim from the un-normalized request target. Request-target validation only requires a leading /, has no CTL bytes, and the...
