log-horizon

Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...

openclaw-dashboard

OpenClaw Agent Dashboard 一个美观、安全、实时的 OpenClaw 代理监控仪表盘。在单一界面中跟踪会话、监控 API 使用情况、查看成本、管理内存文件，并掌握系统健康状态。 📸 截图 概览| 会话| 费用 ---|---|--- | | 速率限制| 实时动态| 日志 ---|---|--- | | ✨...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

agent-scanning

控制你的AI代理。追踪成本。保持合规。开源 功能简介 一个仪表盘管理你的AI团队。 功能| 帮助方式 ---|--- 连接你的代理| 接入OpenAI、Anthropic或自定义代理 设定目标与预算| 分配任务，设定费用上限，定义成功标准 实时监控| 查看每个代理当前正在做什么 获取警报| 当出现异常时通过Slack、邮件或PagerDuty通知 证明合规| 导出审计追踪以满足SOC 2、ISO 42001要求 快速开始（5分钟） 1. 启动数据库 root@kitploit: docker compose up -d postgres 2. 安装并配置 root@kitploit:...

hackrf

HackRF Este repositorio contiene diseños de hardware y software para HackRF, una plataforma de radio definida por software SDR de bajo costo y código abierto. foto de fd0 de https://github.com/fd0/hackrf-one-pictures autor principal: Michael Ossmann [email protected] Información sobre HackRF...

LSTM-MI

A LSTM based framework for handling multiclass imbalance in DGA botnet detection. This repo contains very simple code for classifying domains as DGA or benign. This code demonstrates our results in our paper here: https://www.sciencedirect.com/science/article/pii/S0925231217317320. This paper...

conduit

Conduit 面向AI编码代理的本地控制平面。 按工程师计费 · 硬预算 · 出站治理 · 上下文膨胀可观测性 · 审计就绪导出 —— 全部位于您的VPC内。 Conduit 位于您的 AI 编码代理（Claude Code、Cursor、Codex、Aider）与您已使用的任何提供商（Anthropic、OpenAI、Bedrock、Azure —— 或您现有的 LiteLLM / Portkey 部署）之间。只需一个环境变量即可接入，客户端无需更改，提示和补全内容永不存储。 root@kitploit: Claude Code / Cursor / Codex │...

CVE-2026-5281

CVE-2026-5281 2026/06/27：This vulnerability has been publicly disclosed. Although the patch points differ, the overall approach and the triggering path are completely identical to those in my PoC. Chromium commit root@kitploit: commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71,...

cloud-custodian

Cloud Custodian c7n Cloud Custodian（又称 c7n）是一个用于管理公有云账户和资源的规则引擎。它允许用户定义策略，以实现一个既安全又成本优化的良好管理云基础设施。它将组织中许多临时脚本整合到一个轻量级且灵活的工具中，并提供统一的指标和报告。 Custodian 可用于管理 AWS、Azure 和 GCP 环境，通过确保对安全策略（如加密和访问要求）、标签策略以及通过垃圾回收未使用资源和非工作时间资源管理来降低成本，实现实时合规。 Custodian 还支持对基础设施即代码资产运行策略，以便直接在开发者工作站或 CI 管道中提供反馈。 Custodian...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

CVE-2026-91987 atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

EUVD-2026-78658

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fixed the divide by 0 error in calclcoefs The issue arises when the value of u64 is set to cost.model, and then a division is performed. This could lead to a divide by 0 error. Example: echo 8:0...

CVE-2026-89695 nfsd: cap decoded POSIX ACL count to bound sort cost

In the Linux kernel, the following vulnerability has been resolved: nfsd: cap decoded POSIX ACL count to bound sort cost nfsd4decodeposixacl reads a u32 entry count off the wire and passes it straight to posixaclalloc and sortpaclrange. The latter is an On^2 bubble sort, so a client-chosen count...

CVE-2026-89604 efivarfs: Rate limit statfs() handler

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...

PT-2026-89896

jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDurationvalue or newXMLGregorianCalendarvalue in CoreXMLDeserializers.Std. deserialize. These deserializers are registere...

log-horizon v0.9.0

Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...