Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks. Simulación del ataque de la vulnerabilidad Zerologon CVE-2020-1472 en Active Directory en Windows Server 2016 y el uso de la solución Trend Micro Deep Security para prevenir dichos ataques. La vulnerabilidad Zerologon es una...

CVE-2025-21574-Exploit

CVE-2025-21574-Exploit Características clave de este exploit de caja negra: 1. Fuerza bruta de credenciales: Prueba más de 12 combinaciones comunes de usuario/contraseña predeterminadas Comprueba 5 bases de datos del sistema comunes Detecta automáticamente credenciales válidas 2. Intento de acces...

PrivacyRaven

Nota: Este proyecto está en pausa. PrivacyRaven es una biblioteca de pruebas de privacidad para sistemas de aprendizaje profundo. Puedes usarla para determinar la susceptibilidad de un modelo a diferentes ataques de privacidad; evaluar técnicas de aprendizaje automático que preservan la privacida...

Deep-Reaver

Deep Reaver Deep Reaver 是一款基于 Python 构建的强大、AI 增强的漏洞评估与利用工具包。受 Nmap 和 Nessus 等工具启发，Deep Reaver 专为 Web 应用及服务进行深度、模块化扫描而设计。 功能特性 通过 aiassistant.py 实现 AI 辅助分析 模块化漏洞扫描： SQL 注入（SQLi） 跨站脚本（XSS） 远程代码执行（RCE） 跨站请求伪造（CSRF） 文件上传测试 暴力破解登录检测 身份验证绕过与主机头注入 CMS 检测及 CVE 检查 LFI/RFI、XXE、CORS、JSONP、点击劫持、SSRF 等...

Deep-Live-Cam — Updated!

Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...

GCTAuto-Encoder: A Cross Modal Framework for Security Flaw Detection in IoT Networks

IoT encompasses diverse physical entities, from smart home devices to autonomous vehicles, creating a complex environment with heterogeneous security models. This heterogeneity makes IoT sub-systems vulnerable to various network attacks. Modern security systems must therefore be more robust to...

CVE-2026-26897-EcoOnline-DeepLink

EcoOnline EHS Android — 深度链接验证绕过 → WebView 开放重定向 CVE-2026-26897 CVE-2026-26897 的公开披露/公告，该漏洞是 EcoOnline EHS Android 应用 com.airsweb.v10 中的一个深度链接验证绕过。精心构造的 ehs-app:// 深度链接会被重写为 https:// 并直接加载到应用的主 WebView 中，绕过了应用在其他导航路径上都会执行的主机白名单检查 ，从而允许远程攻击者在受信任的应用内呈现任意攻击者控制的内容（钓鱼攻击）。 已负责任地披露，供应商已确认，并已在 0.2.500 版本...

viber-desktop-html-injection

Viber Desktop — Inyección HTML CVE-2025-55996 CVE: CVE-2025-55996 Descubridor: Thaw Khant Cycbake Producto: Viber Desktop Afectado: Viber Desktop 25.6.0 y posiblemente versiones anteriores Resumen El manejador de enlaces profundos de Viber Desktop viber://forward?text= puede renderizar HTML sin...

CVE-2018-15365

Reflected XSS en Deep Discovery Inspector 3.8 He encontrado una vulnerabilidad XSS reflejada en la interfaz web de administración de Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165. La ruta del script vulnerable es /php/detectiondetailfilter.php. Este script solo es accesible por un...

CVE-2024-5947

CVE-2024-5947 Deep Sea Electronics DSE855 - 身份验证绕过...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab Laboratorio educativo de reproducción reducida creado a partir del informe de vulnerabilidad pública GHSL-2023-142 de Home Assistant Companion for Android y de la estructura de código abierto de la versión vulnerable 2023.8.2. No se utilizan servidores,...

SentinelOne-ATTACK-Queries

Consultas de SentinelOne mapeadas con ATT&CK Consultas mapeadas con MITRE ATT&CK para SentinelOne Deep Visiblity DISCONTINUADO Este proyecto ha sido reemplazado por el repositorioSentinelOne-Queries que avanza hacia firmas compartibles y para uso en herramientas. El nuevo repositorio se basa en e...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

frida-dexdump

FRIDA-DEXDump frida-dexdump 是一个 Frida 工具，用于在内存中查找并转储 dex，以帮助安全工程师分析恶意软件。 让 JetBrains 再次伟大 特性 1. 支持模糊搜索损坏头部的 dex（深度搜索模式）。 2. 兼容所有 Android 版本（Frida 支持的）。 3. 一键安装，无需修改系统，易于部署和使用。 安装 pip3 install frida-dexdump 用法 CLI 参数基于 frida-tools，你可以像这样快速转储前台应用： frida-dexdump -FU 或者指定并启动应用，像这样： frida-dexdump -U -...

CVE-2026-85228

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

VulnCheck KEV: CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 13.0.1.2 via the referer parameter...

Rocky Linux 9 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc (crlsa-2024_9548)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20249548 advisory. OpenEXR: Heap Overflow in Scanline Deep Data Parsing CVE-2023-5841 Tenable has extracted the preceding description block directly from the CIQ security advisory. No...

Rocky Linux 9 [CIQ] Security Update: openexr / openexr-debuginfo / openexr-debugsource / openexr-devel / etc (crlsa-2024_8800)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20248800 advisory. OpenEXR: Heap Overflow in Scanline Deep Data Parsing CVE-2023-5841 Tenable has extracted the preceding description block directly from the CIQ security advisory. No...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs (ALMALINUX9.2:CLSA-2025:1749743322)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1749743322 advisory. - Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation...

Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2021_0549)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20210549 advisory. nodejs-mixin-deep: prototype pollution in function mixin-deep CVE-2019-10746 nodejs-set-value: prototype pollution in function set-value CVE-2019-10747...