Trust-Decision-Security

حل قرار الثقة - هندسة عكسية تتيح لك هذه الأداة إنشاء بصمات ديناميكية لا نهائية إنشاء رموز مرور TD لا نهائية دون اكتشاف بعض ثغرات أمان الويب تشمل: فحوص بصمة TLS غير موجودة على نطاق الرمز ومع ذلك، فحوص TLS موجودة على نطاق موقع البيع التحقق من حمولة البصمة وتحليلها غير موجود إصدار النظام غير مفروض...

cerbos

ما هو Cerbos؟ Cerbos هي طبقة تفويض Authorization تتطور مع منتجك. تمكّنك من تعريف قواعد تحكم قوية وواعية بالسياق context-aware للوصول إلى مصادر تطبيقك في سياسات YAML بسيطة وبديهية؛ تُدار وتُوزَّع عبر البنية التحتية لعمليات Git-ops لديك. توفر واجهات برمجة تطبيقات APIs عالية التوافر لإجراء طلبات بسي...

IBM Operational Decision Manager - Java Deserialization

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, and 8.12.0.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

combobulator

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...

EUVD-2026-71601

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in...

WeaveMark

WeaveMark التنفيذ المرجعي لـ العلامة المائية متعددة البتات القوية والقابلة للتوسع لنماذج LLM عبر نشر الحمولة المشفرة. يقوم WeaveMark بتضمين رسالة من k بت في النص المولّد بواسطة LLM مع الحفاظ على توزيع الرموز غير متحيز. يجمع بين نشر الحمولة المشفرة κ بت من كلمة الشيفرة لكل رمز عبر ℓ طبقات، مع تعيي...

Security Bulletin: IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON...

IBM Operational Decision Manager - JNDI Injection

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145. id: CVE-2024-22319 info: name: IBM Operational Decision Manager -...

context-aware-offensive-intelligence

Context-Aware Offensive Intelligence CAOI Auteur : Indoushka Nekaa Salah Eddine Vue d'ensemble Context-Aware Offensive Intelligence CAOI est un paradigme de post-exploitation axé sur la recherche qui privilégie la compréhension et la prise de décision plutôt que l'exécution. Ce projet introduit u...

FUCKER

FUCKER إطار اختبار اختراق أصلي لنظام ويندوز مكتوب بلغة Go. بنية معيارية مع محرك قرارات مدفوع بالذكاء الاصطناعي واجهة برمجة تطبيقات متوافقة مع OpenAI. البناء root@kitploit: go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ تجميع متقاطع: root@kitploit: GOOS=linux...

VPID: An Integrated Framework for Vulnerability Prioritization and Intrusion Detection in Enterprise Networks

Small enterprises face increasingly serious threats to their internal networks but often lack the financial resources, computing capacity, and specialist staff required to deploy resource intensive security platforms. This paper designs and implements VPID, a lightweight framework for vulnerabili...

oscp-notes-2026

OSCP Field Notebook Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time pressure. Commands and...

PT-2026-82088

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 3.11.0 through 3.17.0 Description An issue exists where the attach-consumer-label plugin fails to correctly sanitize certain input values. This allows an attacker to perform an authorization bypass or escalate privileges...

CVE-2026-64934 Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

CVE-2026-64934 Mira Hormone Monitor, Mira Android App Reliance on untrusted inputs in a security decision

The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself. An authenticated attacker could submit arbitrary firmware version strings for their own device, allowing them to...

CVE-2026-64934

CVE-2026-64934 affects the Mira Hormone Monitor ecosystem, specifically the Mira Android App and related cloud API. The root cause is reliance on the firmware version reported by the companion app without independent attestation from the device itself. An authenticated attacker could submit arbit...

Security Bulletin: IBM Decision Intelligence Client Managed Software (Formerly Known as IBM Automation Decision Services) for July 2026- Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Automation Decision Services. See full list below. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data version 5.4.0 before Patch 4. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field...

Reliance on Untrusted Inputs in a Security Decision

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision through the client authentication flow in the client...