cve_manager

プロジェクト説明 NIST CVEデータベースの新たな脆弱性とその関連製品のxlsxスプレッドシートを毎日スケジュールでメール送信するPythonアプリとシェルスクリプトのコレクション。このスプレッドシートは、組織固有のリスクを手動で解釈するために使用できます。 元々はAntonios AtlasisによるGitHub上のオープンソースプロジェクトに基づく NISTのCVEおよびCPEデータベースをローカルに同期し、基本的なクエリ機能を提供 データからxlsxレポートを作成し、それらのレポートをメール送信 ファイル: cvemanager.py 元はAntonios...

learn365

Learn365此仓库包含我在 Learn 365 挑战期间分享的所有信息。Learn 365 是一项挑战，旨在保持学习精神，并督促自己全年每天学习一些东西，可以是信息安全到日常生活的任何内容。在 Twitter 上关注我以获取定期更新：Harsh Bothra。非常感谢 Mehedi Hasan Remon 最初创建并维护此仓库。...

2026-100DaysofYARA

100 Días de YARA 2026 Un desafío personal para escribir una regla de YARA cada día durante 100 días como parte de la iniciativa 100DaysofYARA. Más información aquí: https://github.com/100DaysofYARA/2026...

100_days_of_kql_2026

100 Days of KQL 2026 倡议 要求： 创建一个GitHub账户 创建一个名为100daysofkql的仓库（示例：https://github.com/m4nbat/100daysofkql2026） 创建一个readme.md文件，并在其中添加以下一行： 100DaysOfKQL2026 主仓库及说明：https://github.com/m4nbat/100daysofkql2026/ 每天编写一条查询（如果你提前写好几条然后每天发布，这是允许的——我们都有生活和别的事情要做）。 -...

vuln-list

vuln-list 自动收集漏洞信息并将其保存为可解析格式 来源 目录| 操作系统| 来源| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1| Amazon Linux| Amazon Linux Security Center| https://alas.aws.amazon.com/...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

WordPress Daily Prayer Time <2022.03.01 - SQL Injection

WordPress Daily Prayer Time plugin prior to 2022.03.01 contains a SQL injection vulnerability.. It does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action, available to unauthenticated users, leading to SQL injection. id:...

vthunting

VT Hunting VThunting is now featured on VirusTotal. Virus Total Hunting is a tiny tool based on the VT api version 3 to run daily, weekly or monthly report about malware hunting. The report can be send via email, Slack channel or Telegram. The tool can also be used in cli to get a report anytime...

EasyEASM

EasyEASM ゼロドルの攻撃対象領域管理ツール Black Hat Arsenal 2023 および Recon Village @ DEF CON 2023 で紹介されました。 説明 Easy EASM は、その名の通り、組織が外部に面した資産を可視化するための、最も簡単にセットアップできるツールです。 業界は「攻撃対象領域管理」を謳う3万ドルのベンダーに支配されていますが、経験豊富なバグバウンティハンターやレッドチーマーは真実を知っています。外部ASMはバグバウンティの世界から生まれました。これらの3万ドルのベンダーの多くは、バックエンドでこのオープンソースツールを利用しています...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

EUVD-2026-68608

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-75133

The Keep Backup Daily WordPress plugin (versions before 2.1.4 ) contains a sensitive information exposure vulnerability in the kbd_cron_process parameter. The parameter is publicly accessible without authentication, allowing an unauthenticated attacker over the network to trigger a full MySQL dat...

CVE-2026-75133 Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

VN_daily_samples

这是一个与从越南上传的恶意样本相关的仓库。...

CVE-2024-24140

CVE-2024-24140: Iniezione SQL nell'app Daily Habit Tracker Prova di concetto PoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24140.md Prova di concetto PoC : https://github.com/BurakSevben/CVE-2024-24140/blob/main/CVE-2024-24140.md...

Malicious code in svelte-daily-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e6392583e46c5137935ed3fb8e29feab51a88b0ddafaf033a27962f8588130 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14493 Malicious code in svelte-daily-streaks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e6392583e46c5137935ed3fb8e29feab51a88b0ddafaf033a27962f8588130 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-70763

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: Daily Business Intelligence. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

EUVD-2026-61714

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: Daily Business Intelligence. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

PT-2026-77758

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: Daily Business Intelligence. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...