SecureOps-Lab

SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...

phantomstars

phantomstars Automated detection and tracking of fake engagement on GitHub A JS Labs project — part of the AI Slop Intelligence initiative. Runs every day. Scores every suspicious account. Detects coordinated bot campaigns. Files issues directly on compromised repos so maintainers can act. Suppor...

tafferugli

Tafferugli is a Twitter Analysis Framework in the form of a web application that is able to filter , collect and analyze tweets. It is thought as a tool to facilitate analysis of some phenomena related to propaganda operations, such as coordinated behavior and automated posting. It comes with a s...

security-research

security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...

CVE-2026-29116

CVE-2026-29116 — Dahua Unauthenticated Remote Denial of Service Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29116 Vendor: Dahua Technology Published: 2026-06-10T06:16:34 UTC Last Modified: 2026-06-10T06:16:34 UTC Source: Dahua Product Security Incident PSI Trust Center...

Vulnerability-Disclosure-Policy

Richtlinie zur Offenlegung von Schwachstellen Wir glauben, dass die Offenlegung von Schwachstellen ein Geben und Nehmen ist. Hersteller sowie Forscher müssen an einer koordinierten Offenlegung von Schwachstellen teilnehmen. Wenn Enable Security im Rahmen eigener Forschung Schwachstellen entdeckt,...

meshdeck

meshdeck MeshDeck-Port für Arch Linux ARM - Wilson Dies wurde ursprünglich in das Arch Linux ARM Wilson-Repo portiert. Das Wilson-Repo wird mit dem ArchAssault-Projekt http://www.archassault.org zusammengeführt, da es Überschneidungen und ähnliche Ziele gibt. Die gesamte Original-/Upstream-Arbeit...

GHSA-7GWP-5PFP-969J

creationtimestamp| type| source ---|---|--- 2026-08-18 00:32:32+00:00| seen| https://gist.github.com/alon710/9d43dd3bb8cad3aff005a6b8be53e64d 2026-08-21 09:24:49+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mtlgunnc4g2v...

kernel-nday-exploits

Linux Kernel N-Day Exploits Local privilege escalation rese...

GHSA-3R53-75J5-3G7J

creationtimestamp| type| source ---|---|--- 2026-07-25 06:31:04+00:00| seen| https://gist.github.com/alon710/31362352a2fade2501771882d0062b85...

CVE-2026-56690

creationtimestamp| type| source ---|---|--- 2026-07-10 12:32:05+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqc5qu5luq2o 2026-07-10 12:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqc6wpo2tm2i 2026-07-10 16:49:16+00:00| seen|...

[SECURITY] Fedora 44 Update: python-pendulum-3.2.0-1.fc44

Unlike other datetime libraries for Python, Pendulum is a drop-in replacement for the standard datetime class it inherits from it, so, basically, you can replace all your datetime instances by DateTime instances in you code. It also removes the notion of naive datetimes: each Pendulum instance is...

Exploit for CVE-2026-13768

CVE-2026-13768: Privileged IoT Hub Credential — Fleet Enumerat...

CVE-2026-11541

creationtimestamp| type| source ---|---|--- 2026-06-30 22:41:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpk34s2k5x2u 2026-07-01 02:51:56+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpkj56ehry2l 2026-07-02 01:31:56+00:00| seen|...

CVE-2026-13487

creationtimestamp| type| source ---|---|--- 2026-06-28 13:22:36+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpe2y3obci2v 2026-06-28 14:35:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpe72l5y2323 2026-06-29 19:46:18+00:00| seen|...

JLSEC-2026-617 Open redirect in the HTTP.jl static file server canonical redirects

Description The static file server's canonical 301 redirects index-file strip, directory trailing-slash add, and file trailing-slash strip built the Location header verbatim from the un-normalized request target. Request-target validation only requires a leading /, has no CTL bytes, and the...

CVE-2026-9456

creationtimestamp| type| source ---|---|--- 2026-06-22 04:16:36+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motzobguut2b...

eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks

New York, USA, 19th June 2026, CyberNewswire...

MAL-2026-6157 Malicious code in dropdown-thread (npm)

The npm package dropdown-thread published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...

MAL-2026-6151 Malicious code in buildautomation-touch (npm)

The npm package buildautomation-touch published by npm user sproger, [email protected] is a deceptive React Native component and part of a coordinated 37-package campaign across two attacker-controlled domains surrprisingcoompanny.lol and barbellmate.xyz. On component mount it registers...