CVE-2025-0288

CVE-2025-0287 이 저장소는 취약한 Windows 드라이버의 리버스 엔지니어링 과정에서 식별된 취약 함수의 스크린샷을 포함합니다. 설명 biontdrv.sysVul: 취약 버전 biontdrv.sysSecure: 패치된 버전 POCCVE-2025-0288.c: 개념 증명 코드 diff.png: 취약 함수의 스크린샷 상세 분석 자세한 분석은 제 블로그에서 확인하실 수 있습니다: 전체 분석 보고서 읽기 취약 함수...

Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer

CVE-2023-34362 Анализ уязвимости MOVEit Transfer Обзор проекта Этот репозиторий содержит академический технический анализ CVE-2023-34362 — критической уязвимости SQL-инъекции, затрагивающей MOVEit Transfer. Проект подготовлен для CYB625 – Этический хакинг и тестирование на проникновение. Важное...

security-portfolio

Skyler M. — 보안 포트폴리오 IT 인프라 및 보안 엔지니어 · 공격적 보안 · 탐지 엔지니어링 · 공급업체 리스크 USMC 참전용사 · 23개 주에 걸쳐 약 200명 규모 기업의 단독 IT 및 보안 책임자 · TryHackMe 상위 2% LinkedIn · GitHub @Mitsu-bis · HackerOne · TryHackMe · 이력서 저는 USMC 참전용사이자 23개 주에서 운영되는 약 200명 규모 건설 회사의 주요 IT 인프라 및 보안 책임자로서, 실험실이 아닌 실제 운영 환경을 매일 방어하고 있습니다. 제...

REx-skill

REx@Skill Reverse Engineering eXecution Skill 컴파일된 바이너리에서 결함을 찾아내고 — 그것을 증명한다. 일곱 개의 서브에이전트, 하나의 증거 트리, 그리고 두 번의 실행을 비교 가능하게 만드는 고정된 툴체인. !rizinhttps://assets.kitploit.com/production/...

DroneCamera

DroneCamera HASAKEE FPV 드론의 라이브 비디오 스트림을 시청하기 위한 Android 앱입니다. 드론의 WiFi 카메라에서 사용하는 독점 UDP 프로토콜을 리버스 엔지니어링하여 제작되었습니다. 지원 드론 HASAKEE FPV 드론 WiFi SSID: HASAKEE-WiFi-XXXXX 0x6363 UDP 프로토콜을 사용하는 VGA 카메라 드론 IP: 192.168.0.1, 비디오 포트: 40000 동일한 프로토콜을 사용하는 다른 HASAKEE/Lewei 기반 드론도 작동할 수 있습니다. 기능 드론 네트워크에 자동...

PT-2026-104386

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.97 Description Incorrect authorization in the FileSystem component on Windows allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

Mobile-Drop-Device-SOC-Detection

🛡️ Project Phantom: Симуляция обнаружения мобильного «подсадного устройства» в SOC Этот проект демонстрирует комплексную лабораторную работу SOC, моделирующую, как несанкционированное Android-устройство без root-прав Casper Via S, используемое в качестве «подсадного устройства» во внутренней сети,...

recurse

Recurse Agentic reverse engineering environment — a Ghidra-class desktop app in the spirit of "Cursor for reverse engineering". Built with Tauri 2 React + TypeScript frontend on top of a pluggable analysis backend. The default is a pure-Rust native engine — no external process, no copyleft...

Covert Assistance: Helpful LLM Agents Evade Oversight in Multi-Agent Systems

As multi-agent systems enter high-stakes domains, the possibility that agents may circumvent safety boundaries is a growing concern. Prior work has examined this risk primarily in adversarial settings, where agents are instructed or rewarded to communicate covertly and evade oversight. We show th...

CVE-2026-95344

A race condition flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/548611433...

CVE-2026-95385

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-95385

Inappropriate implementation in PlatformIntegration in Google Chrome on on Windows prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95373

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95376

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-95376

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-95368

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95368

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-95362

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95363

UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95363

UI misrepresentation in FileSystem in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...