CVE-2021-44228

CVE-2021-44228 이 저장소에는 CVE-2021-44228과 관련된 커뮤니티 스크립트를 EDR 환경에 맞게 포팅한 수정된 버전이 포함되어 있습니다. 스크립트는 다른 기술의 추가 요구 사항과 호환되도록 수정되었습니다. 수정된 스크립트의 최신 원본 버전은 링크된 저장소를 참조하십시오. Palo Alto의 Cortex XDR 다음의 모든 스크립트는 호환되지 않는 Python 모듈을 구현하고xdr 엔트리 포인트를 노출하여 호환되도록 만들었습니다. xdr 함수의 예상 입력 및 출력에 대한 문서는 각 스크립트에서 확인할 수...

flipper-template

Flipper Zero Zig テンプレート Zig プログラミング言語を使用して Flipper Zero アプリケーションを開発するための、モダンで本番環境対応のテンプレートです。このプロジェクトは Zig と Flipper Zero SDK を統合する合理化されたビルドシステムを提供し、開発者が Flipper Zero プラットフォーム向けに型安全かつメモリ安全なアプリケーションを記述できるようにします。 概要 このテンプレートは、Zig の強力なビルドシステムと言語機能を Flipper Zero ファームウェア開発キットに橋渡しします。Zig の ARM Cortex-M...

ThePhish

ThePhish ThePhish는 TheHive, Cortex 및 MISP를 기반으로 한 자동화된 피싱 이메일 분석 도구입니다. Python 3으로 작성되고 Flask 기반의 웹 애플리케이션으로, 이메일 헤더와 본문에서 관측 가능 항목observable을 추출하는 것부터 대부분의 경우 최종 판정verdict을 산출하기까지 전체 분석 과정을 자동화합니다. 또한, 필요에 따라 분석가가 분석 과정에 개입하여 분석 중인 이메일에 대한 추가 정보를 얻을 수 있도록 합니다. TheHive 및 Cortex와 상호작용하기 위해 각각...

Cortex

Cortex 致力于解决 SOC、CSIRT 和安全研究人员在威胁情报、数字取证和事件响应过程中经常遇到的一个常见问题：如何大规模地 、通过查询单一工具 （而非多个工具）来分析 他们收集到的可观测对象（observables） ？ Cortex 是一款开源且自由的软件，由 TheHive Project 专为此目的而创建。IP 地址、电子邮件地址、URL、域名、文件或哈希等可观测对象，可以通过 Web 界面逐一或批量进行分析。借助 Cortex REST API，分析师还可以自动化 这些操作。 使用...

sony-vp-extract

Sony WH-1000XM4 ボイスパック抽出ツール Sony WH-1000XM4 の暗号化されたファームウェアファイルから、音声ガイダンスのMP3プロンプトを復号・抽出します。 AES-128-CBC 鍵は、ヘッドホンのAiroha MT2811ファームウェアをBluetooth Low Energy経由で RACEプロトコル を使ってダンプし、ARM Cortex-...

Cortex-XDR-Config-Extractor

Cortex XDR Config Extractor ⚠️ 자세한 내용은 https://laokoon-security.com/cortex-xdr-config-exctractor/ 현재 독일어로만 제공을 방문하십시오. 이 도구는 레드 팀 평가 중 및 XDR 설정을 감사하기 위해 사용됩니다. 이 도구를 사용하면 Palo Alto Networks의 Cortex XDR Agent의 Database Lock Files를 파싱하고 Agent Settings, Uninstall Password의 Hash and Salt, 그리고 가능한...

CVE-2026-0304

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

CVE-2026-0304

CVE-2026-0304 has been reserved by an organization or individual for a future security announcement. No concrete technical details, affected products, or impact are publicly available in the provided documents. Monitor for updates when the candidate is publicized.

CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM...

Cortex XDR Broker VM: Privilege Escalation Vulnerability

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle MitM access to execute code with root privileges on the Broker VM. Work around: No known workarounds exist for this issue...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also...

Security Bulletin: Multiple Security Vulnerabilities in axios affect Content Cortex for Microsoft Office

Summary axios versions before 1.18.0 0.x: before 0.33.0 have multiple vulnerabilities CVSS up to 8.3, High. CVE-2026-67312/67313 are uncontrolled recursion issues in formDataToJSON that exhaust the call stack via deeply nested field names, causing denial of service. CVE-2026-67314/67316/67319 are...

GO-2026-6258 vulnerabilities

Vulnerabilities for packages: cortex-fips, thanos-receive-controller-fips, tempo-fips, thanos, cortex, cortex-geomys-fips, thanos-receive-controller, tempo, thanos-fips, pulumi-language-yaml...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: avoid kprobe recursion The function cortexa76erratum1463225debuggerHandler is called when handling debug exceptions and synchronous exceptions from BRK instructions. If the compiler does not inline...

Astra Linux – Vulnerability in Linux, Linux 5.10

Certain Arm Cortex and Neoverse processors, as of 2022-03-08, do not properly prevent cache speculation, also known as Spectre-BHB. Attackers can exploit the shared branch history in the Branch History Buffer BHB to influence mispredicted branches. As a result, cache allocation may allow attacker...

CVE-2026-45404 vulnerabilities

Vulnerabilities for packages: cortex-fips, thanos-receive-controller-fips, tempo-fips, thanos, cortex, cortex-geomys-fips, thanos-receive-controller, tempo, thanos-fips, pulumi-language-yaml...

GHSA-42CJ-99W8-CP2P vulnerabilities

Vulnerabilities for packages: cortex-fips, thanos-receive-controller-fips, tempo-fips, thanos, cortex, cortex-geomys-fips, thanos-receive-controller, tempo, thanos-fips, pulumi-language-yaml...

CVE-2026-49986

The Cortex MCP server neuro-cortex-memory, a cross-platform persistent memory MCP, prior to version 3.17.1 treats the CLAUDEPROJECTDIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the openvisualizati...

CVE-2026-49986

Summary: CVE-2026-49986 describes a local arbitrary code execution in the Cortex MCP server (neuro-cortex-memory) prior to version 3.17.1. The root cause is permissive validation in _find_dev_source()/ _is_cortex_root(): the code trusts the CLAUDE_PROJECT_DIR environment variable (set by Claude C...

CVE-2026-49986 Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`

The Cortex MCP server neuro-cortex-memory, a cross-platform persistent memory MCP, prior to version 3.17.1 treats the CLAUDEPROJECTDIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the openvisualizati...