network-threats-taxonomy

Network Threats And Tools Taxonomy Machine Learning based Intrusion Detection Systems are difficult to evaluate due to a shortage of datasets representing accurately network traffic and their associated threats. In this project we attempt at solving this problem by presenting two taxonomies "A...

OSINT-Cheat-sheet

OSINT CHEAT SHEET - List OSINT Tools Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible take your own risks, only for knowledge or educational purposes. Apologies if some of the resources are n...

Security-Datasets

Security Datasets The Security Datasets project is an open-source initiatve that contributes malicious and benign datasets, from different platforms, to the infosec community to expedite data analysis and threat research. Docs https://securitydatasets.com Goals Provide open portable datasets to...

CVE-2026-35492

CVE-2026-35492 CVE-2026-35492Path traversal vulnerability in PartitionedDataset allows arbitrary file write Impact PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or maliciou...

pyod

.. image:: https://raw.githubusercontent.com/yzhao062/pyod/master/brand/pyod-icon.svg :target: https://pyod.dev :alt: PyOD Ecosystem :width: 84px Python Outlier Detection PyOD 3 PyOD 3: Agentic Anomaly Detection At Scale |badgewebsite| |badgepypi| |badgeanaconda| |badgedocs| |badgestars|...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

columbo

Columbo Columbo is a computer forensic analysis tool used to simplify and identify specific patterns in compromised datasets. It breaks down data to small sections and uses pattern recognition and machine learning models to identify adversaries behaviour and their possible locations in compromise...

CVE-2024-52375

WordPress Datasets Manager 💥 Exploit by: Nxploit Khaled Alenazi 📅 CVE Published: November 14, 2024 🧠 CVSS Score: 10.0 Critical 🛠 CWE-434: Unrestricted Upload of File with Dangerous Type 📌 Description A critical vulnerability was discovered in the Datasets Manager by Arttia Creative WordPress...

CVE-2026-57845

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

CVE-2026-57845 Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

EUVD-2026-109092

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

CVE-2026-57845

Hugging Face Datasets version 5.1.0 is vulnerable to Remote Code Execution (RCE) via insecure deserialization. The root cause lies in the deprecated pandas packaged builder , which processes user-supplied data files through pandas.read_pickle() without validation. When a victim calls datasets.loa...

CVE-2026-57845 Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

Exploit for CVE-2026-57845

CVE-2026-57845: Hugging Face datasets datasetmodulefactory...

PT-2026-122146

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

Directory Traversal

Overview kedro-datasets is a Kedro-Datasets is where you can find all of Kedro's data connectors. Affected versions of this package are vulnerable to Directory Traversal via PartitionedDataset, where partition IDs are concatenated directly with the dataset base path without validation. An attacke...

CVE-2026-111170

kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validatesubpath strips leading slashes while pathlib's join discards the base path...

CVE-2026-111170 kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name

kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validatesubpath strips leading slashes while pathlib's join discards the base path...

CVE-2026-111170

kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validatesubpath strips leading slashes while pathlib's join discards the base path...

EUVD-2026-102297

kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validatesubpath strips leading slashes while pathlib's join discards the base path...