100_days_of_kql_2026

100 Days of KQL 2026 イニシアチブ 必要条件: GitHubアカウントを作成する リポジトリ名を 100daysofkql にして作成する（例: https://github.com/m4nbat/100daysofkql2026） readme.md を作成し、以下の行を追加する: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql2026/...

n-days

n-days 제가 발견했거나, In-The-Wild 업데이트에서 바이너리 디핑으로 찾아냈거나, 그저 흥미로운 비공개 버그인 iOS 취약점에 대한 POC 및 라이트업 모음입니다. CVE| 패치 버전| 링크| 직접 보고| ITW 악용| 설명 ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - 정보| ✖️| ✖️| 커널 PC 제어 CVE-2021-1812| iOS 14.5| poc| ✅| ✖️| 커널 OOB 읽기/쓰기? -| iOS 14.5| poc - 정보| ✅| ✖️| 커널 OOB...

2022

YARA 100일 2부 - Electric Detectaloo 끔찍한 작명에 대해 미리 사과드립니다. 하지만 YARA 100일에 오신 것을 환영합니다! 이 리포지토리는 이 기간 동안 만들어진 모든 YARA 아이디어를 보관하는 저장소 역할을 합니다. 여러분이 작성한 재미있는 스크립트, 도구 또는 규칙은 이 GitHub 리포지토리에 커밋할 수 있습니다! 당분간 관련 블로그 게시물, 워크스루 또는 기타 생각들은 다른 곳에 게시해도 됩니다 : 그럼 이게 다 뭐죠? 간단히 말해, 100DaysofYARA는 맬웨어 분석가, 탐지 엔지니어...

2023

100 Days of YARA Part 2 - Electric Detectaloo 끔찍한 이름에 대해 미리 사과드리며, 100 Days of YARA에 오신 것을 환영합니다! 이 저장소는 이 기간 동안 만들어진 모든 YARA 아이디어를 보관하는 공간이 될 것입니다. 여러분이 작성한 재미있는 스크립트, 도구, 또는 규칙은 이 GitHub 저장소에 커밋할 수 있습니다! 당분간 관련 블로그, 워크스루, 또는 기타 생각은 다른 곳에 게시해 주세요 : 그럼 이게 다 뭐죠? 간단히 말해, 100DaysofYARA는 맬웨어 분석가, 탐지...

exploits

익스플로잇 n-day, CTF, 제로데이, 커널, 브라우저와 그 밖에 재미있는 것들이 가득한 개인 익스플로잇 컬렉션입니다 :D...

100DaysofYARA

100 дней YARA 2026 Добро пожаловать в 100 дней YARA! Этот репозиторий будет хранилищем всех идей по YARA, созданных за это время. Любые забавные скрипты, инструменты или правила, которые вы напишете, можно отправлять в этот репозиторий GitHub! А пока любые сопутствующие блоги, руководства или...

DRUPAL-CONTRIB-2026-122

Calculate Working Days allows you to calculate working days between 2 dates. This module doesn't sufficiently restrict access to its settings form...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow, because getstdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: Exploitation may be impractical due to the execution time required to cause an overflow multiple days...

MAL-2026-13516 Malicious code in forge-gas-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1f6143f5a7c6106ab4ba0a21a6adaf9020e332835b1e528de6f36b64537734 index.js is advertised as a Foundry gas-report diff utility but on module load / CLI run schedules a setTimeout of 259,200,000 ms 3 days that calls...

CVE-2026-45378

Decidim is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-document verification admin UI embeds verificationattachment blobs through reusable signed Active Storage disk URLs, allowing anyone who obtains a URL to...

CVE-2026-71206

Shiori's CheckToken function internal/domains/auth.go validates only the JWT's HMAC signature and returns the embedded claims.Account object unmodified, never re-fetching the account from the database. No session store or token-revocation mechanism exists in the codebase. Deleting an account or...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-69079

CTI-Transmute is affected by an unauthenticated Denial of Service via unbounded activity_timeline range. The /activity_timeline endpoint accepts a user-controlled days parameter not restricted to a reasonable range, allowing remote attackers to request data over an arbitrarily long period. This c...

EUVD-2026-52255

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

PT-2026-67340

CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activity timeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...

CVE-2026-67334

better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and storeSessionInDatabase is false. Attackers can reuse deleted user session tokens to maintain authentication for up to seven days...