peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

publications

Calif の出版物 MAD Bugs: AI によって発見されたバグの月間 Apple の内部構造 Apple の内部構造をリバースエンジニアリングするシリーズです。 セキュリティ研究 競合の中の競合: Linux パケットソケットにおける CVE-2025-38617 の悪用 セキュリティ監査 Shamir39 セキュリティ監査、非公開の依頼主からの委託によるものです。 Mbed TLS 3.6.2 セキュリティ監査、Google からの委託によるものです。...

TileServer API - Cross Site Scripting

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...

Exploits

エクスプロイト 再構築されたエクスプロイトとゼロから作成されたエクスプロイトのセレクションです。 一部は練習用に既存のものを再制作したもので、その他はCVEを伴う独自発見のものです。...

CVE-2026-4747-

CVE-2026-4747: FreeBSD 远程内核 RCE 首个由 AI 发现并利用的远程内核漏洞 📋 快速摘要 方面| 详情 ---|--- CVE| CVE-2026-4747 漏洞| kgssapi.ko（RPCSECGSS）中的栈缓冲区溢出 影响| 远程内核代码执行 → uid 0 反向 Shell 受影响版本| FreeBSD 13.5、14.3、14.4、15.0（未打补丁版本） 发现者| Nicholas Carlini 使用 Claude（Anthropic） 公告日期| 2026-03-26 利用时间| 约 8 小时（Claude 实际工作时间 4 小时） 🎯 时间...

CVE-2026-76409

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20333

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20287

Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) are affected by improper privilege management vulnerabilities (grouped under CWE-269 ), discovered internally during a security hardening review. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L...

EUVD-2026-81133

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

EUVD-2026-81130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20332 Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20360 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure Handling

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

CVE-2026-20361

CVE-2026-20361 affects Cisco Nexus Dashboard and involves a SQL injection vulnerability (CWE-89) discovered internally during a comprehensive security review. The issue is addressed as part of a software hardening release (September 2026). The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) , with a ne...

EUVD-2026-81100

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC, engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release...

EUVD-2026-81095

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal securi...

CVE-2026-20326 Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...

Cisco Nexus Dashboard Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. Thes...

CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442

CVE-2026-76442 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , where multiple internally discovered vulnerabilities stem from improper validation of specified quantity in input (CWE-1284). Cisco rates this HIGH severity (CVSS 7.5) with a network attack vector , no requ...

CVE-2026-76443 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...