CVE-2018-15365

Reflected XSS in Deep Discovery Inspector 3.8 I've found a reflected XSS vulnerability in the management web interface of Deep Discovery Inspector 3.8 Service Pack 5 Build: 3.85.1165 Vulnerable script path is /php/detectiondetailfilter.php. This script is accessible only by an authenticated user,...

CVE-2024-5947

CVE-2024-5947 Deep Sea Electronics DSE855 - Authentication Bypass...

CVE-2026-84961

undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent functions, any function-valued TLS option, such as a caller-supplied checkServerIdentity callback or a custom connector...

CVE-2026-84961

undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent functions, any function-valued TLS option, such as a caller-supplied checkServerIdentity callback or a custom connector...

CVE-2026-84961

CVE-2026-84961 affects undici , the Node.js HTTP client library. The BalancedPool constructor passes its entire options object through an internal JSON deep-clone , which silently discards any function-valued TLS options (e.g., a custom checkServerIdentity callback or a custom connector in the co...

EUVD-2026-71494

undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent functions, any function-valued TLS option, such as a caller-supplied checkServerIdentity callback or a custom connector...

CVE-2026-84961 undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON cannot represent functions, any function-valued TLS option, such as a caller-supplied checkServerIdentity callback or a custom connector...

SentinelOne-ATTACK-Queries

ATT&CK 映射的 SentinelOne 查询 为 SentinelOne Deep Visiblity 映射的 MITRE ATT&CK 查询 已停止维护 此项目已被SentinelOne-Queries 仓库取代，该仓库正朝着可共享签名及工具化方向发展。新仓库基于本仓库的成果构建，大多数测试仍针对 Atomic Red Team 进行。这些查询将不会随着 Agent 版本等之间的检测变化而更新。 本项目旨在记录 SentinelOne Deep Visibility 查询，用于检测 Red Canary Co 的 Atomic Red Team 框架生成的 Windows...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

frida-dexdump

FRIDA-DEXDump frida-dexdump is a frida tool to find and dump dex in memory to support security engineers in analyzing malware. Make Jetbrains Great Again Features 1. Support fuzzy search broken header dexdeep search mode. 2. Compatible with all android versionfrida supported. 3. One click...

Linux Distros Unpatched Vulnerability : CVE-2026-84961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON. Because JSON...

toml-node: Uncontrolled Recursion

Summary toml.parse crashes with an uncaught RangeError: Maximum call stack size exceeded when parsing deeply nested arrays or inline tables. The parser is generated by Peggy 5.1.0 a PEG parser generator as a recursive-descent parser; the value rule mutually recurses with the array and inline-tabl...

SudoScience

SudoScience CVE-2021-3156 深入剖析。...

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

模拟与防范Zerologon（CVE-2020-1472）漏洞攻击 模拟在Windows Server 2016上对Active Directory中Zerologon（CVE-2020-1472）漏洞的攻击，并使用Trend Micro Deep Security解决方案来防范此类攻击。 Zerologon漏洞是Netlogon协议中的一个弱点，可在无需密码的情况下被利用，使攻击者能够轻易控制Active Directory系统中的域控制器。 工具 VMware Workstation Windows Server 2016 Active Directory Kali Linux...

ndff

ndff 面向 fluentd 的 nDPI ndff 是一个带有 nDPI 库的、面向 fluentd 的流收集器。 ndff 是基于 nDPI 中的示例 ndpiReader 实现的。 概述 nDPI 是一个用于深度包检测的开源 LGPLv3 库。 ndpiReader 是 nDPI 中的一个示例，具有以下功能。 从数据包（pcap 文件或设备）中检测协议 应用 BPF 过滤器过滤选定的流量 将数据包的内容以 JSON 格式导出到文件 等等…… 如果能在 fluentd 中分析 nDPI 的结果，将会非常有用。 因此，ndff 将数据包聚合成类似 NetFlow 的流，并以 JSON...

TrustTunnel v1.1.0

Clients · App store · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuration Client setup Install...

CVE-2023-41898_Lab

CVE-2023-41898 未经验证的 Deep Link 实验室 这是一个基于 Home Assistant Companion for Android 的公开漏洞报告（GHSL-2023-142）以及漏洞版本 2023.8.2 的开源结构制作的教育性精简复现实验环境。 不会使用真实的 Home Assistant 服务器、账户或令牌，仅暴露名为 LABTOKENCVE202341898NOTREAL 的固定虚拟令牌。 漏洞概述 目标：Home Assistant Companion for Android 受影响版本：低于 2023.9.2（依据官方公告） 修复版本：2023.9....

Jammer-Loc

Jammer-Loc 本存储库包含论文的代码和数据集链接 “用于室内 UWB 干扰源定位的机器与深度学习方法。” 使用示例 运行超参数优化过程： root@kitploit: python hpo.py \ --task classification \ --mode actual \ --framework ml \ --config config.yaml \ --trials 50 \ --study-name mystudy 1. 模型和指标必须由 main.py 以预期格式保存。 2. Optuna 结果默认保存到 hpo.db。 3. 所有命令行选项均在 hpo.py 中使用...

PT-2026-84462

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.16.1 Description An attacker can craft a PDF file that causes the get outline function in pypdf/ doc common.py to consume excessive memory and long runtimes. This occurs when retrieving document outlines that contain ...

CVE-2026-19873

HTML::FormFu (Perl), versions through 2.08 , is vulnerable to resource exhaustion via an unbounded repeat count in Repeatable elements . When counter_name is set, the process method reads the count from the query string, validates only that it is a positive integer, and deep-clones the child subt...