64 matches found
CVE-2026-48907
E.L.V CVE 研究与评估框架 E.L.V — Exploit Loader & Vulnerability Firmware 用于授权漏洞评估的网络安全研究工具。 目录 概述 重要安全须知 项目信息 当前脚本的功能 工作流程 环境要求 安装 命令行接口 输入文件 输出 并发 网络行为 SSL/TLS 行为 日志与结果 错误处理 源代码结构 安全注意事项 负责任的测试方法 故障排除 开发说明...
CVE-2026-20182
📚 教育性安全研究仓库 一个用于在受控环境中学习、测试和研究网络安全概念的仓库。 ⚡ 简单用法 仅在安全且经授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 经授权的渗透测试环境 示例配置： root@kitploit: git clone https://github.com/HORKimhab/CVE-2026-20182 && cd CVE-2026-20182 pip install -r requirements.txt 示例用法： root@kitploit: Mose usage python cve-2026-20182-poc.py -h...
Reports
网络安全研究与威胁情报报告 本仓库收录了一系列聚焦 2025-2026 年网络安全格局的技术报告、威胁情报简报与进攻性安全研究成果。 项目结构 报告按以下前缀系统进行分类： OS ：进攻性安全（漏洞利用研究、实验室 PoC 与红队战术） IS ：信息安全（威胁情报、事件复盘与防御策略） LS ：行业格局（宏观行业趋势、预测与态势感知） 报告索引 2026 年报告 文件| 类型| 描述 ---|---|--- OS-IS-CVE-2026-58457-07-2026.md| OS/IS| Shenzhen Aitemi M300 Wi-Fi 中继器（硬件型号 MT02） 未认证的 OS...
CVE-2026-10294
creationtimestamp| type| source ---|---|--- 2026-08-11 11:52:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3msskh4gdlk25 2026-08-11 11:52:19+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3msskh5kfv225...
Exploit for CVE-2026-16723
cve-id Donate Support the maintenance of this project wit...
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI on Friday released three versions of GPT-5.6 , called Sol, Terra, and Luna , as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model and the most powerful, Terra strikes a balance between efficien...
Agent Security Is a Systems Problem
We take the position that agent security must be approached as a systems problem: the AI model powering the agent must be treated as an untrusted component, and security invariants must be enforced at the system level. Through this lens, efforts to increase model robustness the dominant viewpoint...
Hackers or Hallucinators? A Comprehensive Analysis of LLM-Based Automated Penetration Testing
The rapid advancement of Large Language Models LLMs has created new opportunities for Automated Penetration Testing AutoPT, spawning numerous frameworks aimed at achieving end-to-end autonomous attacks. However, despite the proliferation of related studies, existing research generally lacks...
Supporting Artifact Evaluation with LLMs: A Study with Published Security Research Papers
Artifact Evaluation AE is essential for ensuring the transparency and reliability of research, closing the gap between exploratory work and real-world deployment is particularly important in cybersecurity, particularly in IoT and CPSs, where large-scale, heterogeneous, and privacy-sensitive data...
RCE-Exploit-Tools
RCE Exploit Research Tools Project Overview This repository cont...
Towards a Systematic Taxonomy of Attacks against Space Infrastructures
Space infrastructures represent an emerging domain that is critical to the global economy and society. However, this domain is vulnerable to attacks. To enhance the resilience of this domain, we must understand the attacks that can be waged against it. The status quo is that there is no systemati...
Fake ChatGPT Atlas Browser Used in ClickFix Attack to Steal Passwords
Cybersecurity researchers have uncovered a critical ChatGPT Atlas browser attack, confirming the danger of the ongoing surge in the ClickFix threat...
Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft
Cybersecurity researchers have demonstrated an "end-to-end privilege escalation chain" in Amazon Elastic Container Service ECS that could be exploited by an attacker to conduct lateral movement, access sensitive data, and seize control of the cloud environment. The attack technique has been...
AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown
Cybersecurity researchers have flagged a malicious npm package that was generated using artificial intelligence AI and concealed a cryptocurrency wallet drainer. The package, @kodane/patch-manager, claims to offer "advanced license validation and registry optimization utilities for high-performan...
Researchers Expose Massive Online Fake Currency Operation in India
Cybersecurity researchers at CloudSEK's STRIKE team used facial recognition and GPS data to expose a massive, over $2…...
BRB, pausing for a "Sanctuary Moon" marathon
Welcome to this week's edition of the Threat Source newsletter. Yesterday, Cisco Talos debuted the first Humans of Talos episode, where I interviewed Hazel Burton, a face and voice you're probably familiar with. In our conversation, Hazel shared not just the story of how she found her way onto th...
eSIM Vulnerability in eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks
Cybersecurity researchers have discovered a new hacking technique that exploits weaknesses in the eSIM technology used in modern smartphones, exposing users to severe risks. The issues impact the Kigen eUICC card. According to the Irish company's website, more than two billion SIMs in IoT devices...
New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes
Cybersecurity researchers have discovered a novel attack technique called TokenBreak that can be used to bypass a large language model's LLM safety and content moderation guardrails with just a single character change. "The TokenBreak attack targets a text classification model's tokenization...
CrazyHunter Campaign Targets Taiwanese Critical Sectors
This blog entry details research on emerging ransomware group CrazyHunter, which has launched a sophisticated campaign aimed at Taiwan's essential services...