binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

hackrf

HackRF 이 저장소는 저비용 오픈소스 소프트웨어 정의 라디오 플랫폼인 HackRF를 위한 하드웨어 설계와 소프트웨어를 포함합니다. 사진: fd0, 출처: https://github.com/fd0/hackrf-one-pictures 주 저자: Michael Ossmann [email protected] HackRF 정보 및 구매: https://greatscottgadgets.com/hackrf/ 문서 HackRF 문서는 Read the Docs에서 볼 수 있습니다. HackRF의 원본 문서 파일은 이 저장소의 do...

cloud-custodian

Cloud Custodian c7n Cloud Custodian, également connu sous le nom de c7n, est un moteur de règles pour la gestion des comptes et des ressources cloud publics. Il permet aux utilisateurs de définir des politiques pour une infrastructure cloud bien gérée, à la fois sécurisée et optimisée en termes d...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

LSTM-MI

Фреймворк на основе LSTM для обработки дисбаланса многоклассовых данных при обнаружении DGA-ботнетов. Этот репозиторий содержит очень простой код для классификации доменов как DGA или легитимных. Этот код демонстрирует наши результаты в нашей статье здесь:...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

EUVD-2026-42994

Snipe-IT has an authorization bypass on print inventory page...

CVE-2026-81721 openssl_encrypt before 1.4.9 Denial of Service via KDF

opensslencrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious encrypted files declaring arbitrarily large Argon2, scrypt, or balloon KDF parameters to...

CVE-2026-81721

openssl_encrypt before 1.4.9 fails to validate KDF cost parameters (Argon2, scrypt, or balloon) in encrypted file metadata and keystore headers. An unauthenticated attacker over the network can craft a malicious encrypted file declaring arbitrarily large KDF parameters, triggering unbounded memor...

CVE-2026-81720 openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81720 openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81699

openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function (KDF) costs in crafted files. An attacker can supply a malicious file with excessive KDF parameters over the network with no privileges required , triggering unbounded memory and CPU exhaustion during pre-auth...

CVE-2026-81699 openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-81699 openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

conduit

Conduit Il control plane on-prem per agenti di codifica AI. Attribuzione dei costi per ingegnere · budget rigidi · governance dell'egresso · osservabilità del context-rot · esportazioni pronte per audit — tutto all'interno della tua VPC. Conduit si posiziona tra i tuoi agenti di codifica AI Claud...

log-horizon

Microsoft Sentinel SIEM Log Source Analyzer Ho dovuto rispondere a domande come "cosa stiamo realmente ottenendo da questi log?" o "quali sono i log consigliati per Microsoft Sentinel?" più volte di quante possa contare. La risposta dipende sempre da così tante cose, ma possiamo essere generici...

openclaw-dashboard

Dashboard degli Agenti OpenClaw Una dashboard di monitoraggio bella, sicura e in tempo reale per gli agenti OpenClaw. Tieni traccia delle sessioni, monitora l'uso delle API, visualizza i costi, gestisci i file di memoria e controlla lo stato del sistema — tutto in un unico posto. 📸 Screenshots...

CVE-2026-5281

CVE-2026-5281 2026/06/27：Questa vulnerabilità è stata divulgata pubblicamente. Sebbene i punti di patch differiscano, l'approccio generale e il percorso di attivazione sono completamente identici a quelli del mio PoC. Commit di Chromium commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD -...