log-horizon

Microsoft Sentinel SIEM ログソースアナライザー 何度も「これらのログから実際に何が得られているのか？」とか「Microsoft Sentinel のおすすめログは何か？」と聞かれてきました。答えは常に多くの要素に依存しますが、汎用的なアプローチは可能です。そこで、このツールを作りました。 Log Horizon は Microsoft Sentinel ワークスペース（オプションで Defender XDR...

CVE-2026-5281

CVE-2026-5281 2026/06/27：この脆弱性は公開されています。パッチの箇所は異なりますが、全体的な手法とトリガーパスは私のPoCと完全に同一です。 Chromium コミット commit e00a64ead1abef9447943efede7bc26362ac3797 HEAD - 146.0.7680.71, tag: 146.0.7680.71 Author: Roger McFarlane [email protected] Date: Mon Mar 9 12:52:01 2026 -0700 root@kitploit:...

openclaw-dashboard

OpenClaw Agent Dashboard OpenClaw エージェント向けの美しく、安全で、リアルタイムな監視ダッシュボード。セッションの追跡、API 使用状況の監視、コストの表示、メモリファイルの管理、システムの健全性の把握をすべて一か所で行えます。 📸 スクリーンショット 概要| セッション| コスト ---|---|--- | | レート制限| ライブフィード| ログ ---|---|--- | | !Logshttps://assets.kitploit.com/production/public/readmes/11778/4b8b21...

agent-scanning

AI 에이전트를 제어하세요. 비용을 추적하세요. 규정을 준수하세요. 오픈소스 기능 AI 팀을 관리하는 하나의 대시보드. 기능| 도움말 ---|--- 에이전트 연결| OpenAI, Anthropic 또는 사용자 정의 에이전트 연결 목표 및 예산 설정| 작업 할당, 비용 상한, 성공 정의 실시간 모니터링| 각 에이전트가 현재 수행 중인 작업 확인 알림 수신| 문제 발생 시 Slack, 이메일 또는 PagerDuty로 알림 규정 준수 증명| SOC 2, ISO 42001 감사 추적 내보내기 빠른 시작 5분 1. 데이터베이스 시작...

hackrf

HackRF このリポジトリには、HackRF のハードウェア設計とソフトウェアが含まれています。 HackRF は、低コストでオープンソースのソフトウェア無線 SDR プラットフォームです。 fd0 撮影、https://github.com/fd0/hackrf-one-pictures より 主著者: Michael Ossmann [email protected] HackRF の情報と購入方法: https://greatscottgadgets.com/hackrf/ ドキュメント HackRF のドキュメントは Read the Docs...

cloud-custodian

Cloud Custodian c7n Cloud Custodianc7n이라고도 함은 퍼블릭 클라우드 계정과 리소스를 관리하기 위한 규칙 엔진입니다. 사용자가 보안 및 비용 최적화가 잘 된 클라우드 인프라를 운영할 수 있도록 정책을 정의할 수 있게 해줍니다. 조직에서 사용하던 여러 임시 스크립트를 통합된 지표 및 보고 기능을 갖춘 가볍고 유연한 도구로 대체합니다. Custodian은 AWS, Azure, GCP 환경을 관리하여 보안 정책암호화 및 액세스 요구 사항 등, 태그 정책에 대한 실시간 규정 준수를 보장하고, 사용되지 않는...

conduit

Conduit AI 코딩 에이전트를 위한 온프레미스 제어 평면. 엔지니어별 비용 귀속 · 엄격한 예산 · 송신 거버넌스 · 컨텍스트 부패 관찰 · 감사 준비된 내보내기 — 모두 VPC 내에서. Conduit은 AI 코딩 에이전트Claude Code, Cursor, Codex, Aider와 이미 사용 중인 공급자Anthropic, OpenAI, Bedrock, Azure — 또는 기존 LiteLLM / Portkey 배포 사이에 위치합니다. 하나의 환경 변수로 도입 가능, 클라이언트 변경 불필요, 프롬프트와 완성은 절대 저장되지...

DomainMOD 4.13.0 - Cross-Site Scripting

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

LSTM-MI

DGAボットネット検出におけるマルチクラス不均衡を扱うためのLSTMベースのフレームワーク...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

CVE-2026-82398

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, an attacker can craft a PDF that causes long runtimes when the pypdf/utils.py function readuntilwhitespace reads a stream containing a long run of bytes without whitespace. The function repeatedly performs immutable bytes...

CVE-2026-50198 Wallos: Cross-user subscription cost inference via replacement_subscription_id

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can edit their own inactive subscription and set replacementsubscriptionid to a subscription ID belonging to another user. The write is accepted, and later the stats logic...

CVE-2026-50198 Wallos: Cross-user subscription cost inference via replacement_subscription_id

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1, an authenticated user can edit their own inactive subscription and set replacementsubscriptionid to a subscription ID belonging to another user. The write is accepted, and later the stats logic...

CVE-2026-50198

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.1 , an authenticated user could edit their own inactive subscription and set the replacement_subscription_id field to a subscription ID belonging to another user. The write was accepted, and the stats logi...

NoiseHound v1.2.0

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

EUVD-2026-42994

Snipe-IT has an authorization bypass on print inventory page...

CVE-2026-81721 openssl_encrypt before 1.4.9 Denial of Service via KDF

opensslencrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious encrypted files declaring arbitrarily large Argon2, scrypt, or balloon KDF parameters to...