100_days_of_kql_2026

100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...

n-days

n-days 私が発見した iOS の脆弱性、In-The-Wild アップデートからのバイナリ差分で見つけた脆弱性、または単にクールな非公開バグに関する PoC と writeup のコレクションです。 CVE| 修正版| リンク| 自己報告| ITWで悪用| 説明 ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| カーネルのPC制御 CVE-2021-1812| iOS 14.5| poc| ✅| ✖️| カーネル OOB 読み書き？ -| iOS 14.5| poc - info| ✅| ✖️|...

2022

100 Days of YARA パート2 - Electric Detectaloo ひどい名前で先にお詫びしますが、100 Days of YARAへようこそ！このリポジトリは、この期間中に作られたすべてのYARAアイデアの保管庫として機能します。あなたが書いた楽しいスクリプト、ツール、ルールは、このGitHubリポジトリにコミットできます！今のところ、関連するブログやウォークスルー、その他の雑感は別の場所で公開してもらって大丈夫です : で、結局これは一体何なのか？ 簡単に言うと、100DaysofYARA...

2023

100 Days of YARA Part 2 - Electric Detectaloo 先にひどい命名について謝っておきますが、100 Days of YARA へようこそ！このリポジトリは、この期間中に作成されたすべての YARA アイデアの保管庫として機能します。あなたが書いた楽しいスクリプト、ツール、ルールは、すべてこの GitHub リポジトリにコミットできます！今のところ、関連するブログやウォークスルー、その他の雑感は他の場所で公開してください : で、これは一体何なのか？ 要するに、100DaysofYARA は、マルウェアアナリスト、検知エンジニア、リバーサーが YAR...

exploits

Exploits n-day、CTF、0day、カーネル、ブラウザなどの私の個人用エクスプロイトコレクション、そしてクールなものがたくさん :D...

100DaysofYARA

100 Days of YARA 2026 100 Days of YARAへようこそ！このリポジトリは、この期間に作成されたすべてのYARAアイデアを保存する場所として機能します。作成した楽しいスクリプト、ツール、ルールはすべてこのGitHubリポジトリにコミットできます！当面は、関連するブログ記事、ウォークスルー、その他の考察は別の場所で公開してください : これっていったい何なの？ 簡単に言うと、100DaysofYARA...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow, because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: Exploitation may be impractical due to the execution time required to cause an overflow multiple days...

DRUPAL-CONTRIB-2026-122

Calculate Working Days allows you to calculate working days between 2 dates. This module doesn't sufficiently restrict access to its settings form...

MAL-2026-13516 Malicious code in forge-gas-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1f6143f5a7c6106ab4ba0a21a6adaf9020e332835b1e528de6f36b64537734 index.js is advertised as a Foundry gas-report diff utility but on module load / CLI run schedules a setTimeout of 259,200,000 ms 3 days that calls...

CVE-2026-45378

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin UI embeds verificationattachment blobs through reusable signed Active Storage disk URLs, allowing anyone who obtains a URL to...

CVE-2026-71206

Shiori's CheckToken function internal/domains/auth.go validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase. Deleting an account or...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

EUVD-2026-52255

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079

CTI-Transmute is affected by an unauthenticated Denial of Service via unbounded activity_timeline range. The /activity_timeline endpoint accepts a user-controlled days parameter not restricted to a reasonable range, allowing remote attackers to request data over an arbitrarily long period. This c...

CVE-2026-69079: Allocation of Resources Without Limits or Throttling

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

PT-2026-67340

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...