940610 matches found
tafferugli
Tafferugli is a Twitter Analysis Framework in the form of a web application that is able to filter , collect and analyze tweets. It is thought as a tool to facilitate analysis of some phenomena related to propaganda operations, such as coordinated behavior and automated posting. It comes with a s...
phantomstars
phantomstars Automated detection and tracking of fake engagement on GitHub A JS Labs project — part of the AI Slop Intelligence initiative. Runs every day. Scores every suspicious account. Detects coordinated bot campaigns. Files issues directly on compromised repos so maintainers can act. Suppor...
Vulnerability-Disclosure-Policy
脆弱性開示ポリシー 私たちは、脆弱性の開示は相互理解が重要であると考えています。研究者だけでなく、ベンダーも協調的な脆弱性開示に参加しなければなりません。Enable Securityは独自の調査を通じて脆弱性を発見した場合、その脆弱性をベンダーに通知し、詳細は最初の連絡から90日後に防御コミュニティに公開します。ただし、ベンダーが修正プログラムをリリースした場合は、それより早く公開します。 Enable Securityは、ベンダーとの機密通信の確立に合理的な努力を払います。 ベンダーのセキュリティチームまたは指定された連絡先との連絡が確立された後、Enable...
CVE-2026-29116
CVE-2026-29116 — Dahua Unauthenticated Remote Denial of Service Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29116 Vendor: Dahua Technology Published: 2026-06-10T06:16:34 UTC Last Modified: 2026-06-10T06:16:34 UTC Source: Dahua Product Security Incident PSI Trust Center...
SecureOps-Lab
SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...
security-research
security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...
meshdeck
meshdeck Arch Linux ARM 向け MeshDeck ポート - Wilson これは元々 Arch Linux ARM の Wilson リポジトリに移植されました。Wilson リポジトリは ArchAssault プロジェクト http://www.archassault.org と統合されつつあります。 重複と類似した目標があるためです。 オリジナル/アップストリームはすべて、Dr. Philip Polstra によって作成されています。 彼の Sourceforge ページから: http://sourceforge.net/projects/thedeck...
Malicious code in agent-free (npm)
The npm package agent-free is malicious. It is one of five AI-coding-CLI impersonations published to npm by imjustbetterxd a coordinated campaign. On use, the CLI reads the developer's LLM/provider API key - from environment variables e.g. EXAAPIKEY, NVIDIAAPIKEY and its own config - and routes t...
CGA-7PJM-7Q7V-PC3F
Bulletin has no description...
GHSA-7GWP-5PFP-969J
creationtimestamp| type| source ---|---|--- 2026-08-18 00:32:32+00:00| seen| https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d 2026-08-21 09:24:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtlgunnc4g2v...
kernel-nday-exploits
Linux Kernel N-Day Exploits Local privilege escalation rese...
GHSA-3R53-75J5-3G7J
creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...
CVE-2026-56690
creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqc5qu5luq2o 2026-07-10 12:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc6wpo2tm2i 2026-07-10 16:49:16+00:00| seen|...
[SECURITY] Fedora 44 Update: python-pendulum-3.2.0-1.fc44
Unlike other datetime libraries for Python, Pendulum is a drop-in replacement for the standard datetime class it inherits from it, so, basically, you can replace all your datetime instances by DateTime instances in you code. It also removes the notion of naive datetimes: each Pendulum instance is...
Exploit for CVE-2026-13768
CVE-2026-13768: Privileged IoT Hub Credential — Fleet Enumerat...
CVE-2026-11541
creationtimestamp| type| source ---|---|--- 2026-06-30 22:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk34s2k5x2u 2026-07-01 02:51:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpkj56ehry2l 2026-07-02 01:31:56+00:00| seen|...
CVE-2026-13487
creationtimestamp| type| source ---|---|--- 2026-06-28 13:22:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpe2y3obci2v 2026-06-28 14:35:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe72l5y2323 2026-06-29 19:46:18+00:00| seen|...
JLSEC-2026-617 Open redirect in the HTTP.jl static file server canonical redirects
Description The static file server's canonical 301 redirects index-file strip, directory trailing-slash add, and file trailing-slash strip built the Location header verbatim from the un-normalized request target. Request-target validation only requires a leading /, has no CTL bytes, and the...
