GHSA-H8M9-JGF8-VWVP Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

SAML Tenant Binding Enables Cross-Tenant Account Takeover Summary Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token. A malicious tenant with its own SAML configuration and a self-controlled IdP could...

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

SAML Tenant Binding Enables Cross-Tenant Account Takeover Summary Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token. A malicious tenant with its own SAML configuration and a self-controlled IdP could...

rmm

Recon MindMap RMM Jason Haddix의 TBHM v4 recon edition 워크숍에서 영감을 받아, 도메인 및 서브도메인 목록을 정리하는 작업을 단순화해 주는 CLI명령줄 인터페이스 도구를 개발했습니다. 목표는 Obsidian Mind Map이나 xmind 같은 마인드 매핑 소프트웨어를 사용하여 복잡한 도메인 구조를 쉽게 생성할 수 있는 도구를 만드는 것입니다. 목차 설치 사용법 기여 행동 강령 연락처 정보 후원 설치 소스에서 빌드 작동하는 Go 환경이 필요합니다. 따라서 Go 설치 방법을 따라 주시기...

cynative v1.11.3

Build your own security agents Open-source framework for security agents with live, read-only access to your infrastructure. Quickstart · Built-in agents · Your first agent · Docs Ask your infrastructure anything. Cynative runs frontier models across your code, cloud and runtime - reasoning throu...

BLACKHAT_Asia2023

BLACKHATAsia2023 BLACKHAT USA2022の公開PDFについて ファイル一覧。興味のあるものを検索してください。 root@kitploit: BLACKHATAsia2023 ├── AS-23-Babkin-firmWar-An-Imminent-Threat-to-the-Foundation-of-Computing.pdf ├── AS-23-Bai-Stealthy-Sensitive-Information-Collection-from-Android-Apps.pdf ├──...

EvilCrowRF_Custom_Firmware_CC1101_FlipperZero

EvilCrowRFCustomFirmwareCC1101FlipperZero 이 펌웨어의 아이디어, 개발 및 구현: h-RAT https://github.com/h-RAT/. Discord: hrat 원본 펌웨어의 아이디어, 개발 및 구현: Joel Serna @JoelSernaMoreno - https://github.com/joelsernamoreno/. 주요 협력자: Little Satan https://github.com/LSatan/ PCB 설계: Ignacio Díaz Álvarez @Nacon96, Forensic...

EATGuard

EATGuard EATExport Address Table 보호 완화Export Address Filtering, EAF의 구현 작동 방식 이 프로젝트는 세 개의 바이너리로 구성되며, 컴파일하면 EATGuard\bin\에서 찾을 수 있습니다: 1. EATGuardApplication.exe - EATGuardDll.dll을 프로세스에 로드한 다음 notepad.exe를 실행하는 일부 실행 코드셸코드를 실행하는 "악성" 애플리케이션. 2. EATGuardDll.dll - 사용자 모드와 커널 모드 사이의 "브리지"를 제공하는...

Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

GHSA-2CG9-97GQ-9MQP Shopper: Missing authorization on product removal actions in CollectionProducts component

Title Missing authorization on product removal actions in CollectionProducts component Description A lack of authorization control was discovered on both the per-record delete action and the bulk delete action inside packages/admin/src/Livewire/Components/Collection/CollectionProducts.php. Neithe...

RendezvousRAT

정보 이 저장소는 go-libp2p-examples에서 찾은 예제를 기반으로 GO를 활용하는 두 개의 최소한의 개념 증명 RAT를 포함합니다. 현재 이 RAT는 Linux 호스트를 대상으로 합니다. 그러나 go build 변수를 수정하여 Windows용으로 빌드할 수 있습니다. Linux에서 환경 변수를 설정하여 GO가 Windows용으로 컴파일하도록 지시할 수 있습니다. "env GOOS=windows"를 설정하고 프로젝트의 명령을 "sh -c"에서 "cmd.exe /c"로 변경하세요. 이는 이후 버전에서 구현될 예정입니다...

Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

GHSA-99H5-JHH7-V3R3 Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

GHSA-G3F9-G5VJ-P62F Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Title Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component Description A lack of authorization control was discovered in the stockAction method in packages/admin/src/Livewire/Components/Products/VariantStock.php. The component exposes a public $variant...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

AI-assisted project. This research, exploit development, a...

GHSA-2J95-GQXF-V3VG Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

Vulnerability ZooKeeperReplicationConfig.secret silently substitutes the hard-coded constant "ch4n63m3" leetspeak for "change me" whenever the operator omits replication.secret. The same secret is wired into both the client-facing SASL context and the quorum/learner SASL contexts of the embedded...

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

Vulnerability ZooKeeperReplicationConfig.secret silently substitutes the hard-coded constant "ch4n63m3" leetspeak for "change me" whenever the operator omits replication.secret. The same secret is wired into both the client-facing SASL context and the quorum/learner SASL contexts of the embedded...

CVE-2026-43499-S26

CVE-2026-43499 — Android GKI 6.12 pselect / configfs 커널 익스플로잇 Android GKI 6.12 라인Samsung 및 Pixel 기기을 대상으로 하는 Linux 커널 익스플로잇으로, CVE-2026-43499 를 겨냥합니다: rtmutexstartproxylock 내의 버그가 있는 removewaiter 롤백이 waiter::task 대신 current를 사용하여, waiter의 piblockedon이 나중에 pop되는 커널 스택 rtmutexwaiter를 가리킨 채로 남게 됩니다...

[SECURITY] [DSA 6494-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6494-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 11, 2026 https://www.debian.org/security/faq -...

CVE-2025-10230

CVE-2025-10230: Samba 치명적 RCE CVSS 10.0 취약점 요약 CVE-2025-10230은 13년 동안 Samba 코드베이스에 숨겨져 있던 치명적인 원격 코드 실행RCE 취약점입니다. 이 결함은 WINSWindows Internet Name Service 등록 패킷 처리에서 발생합니다. wins support = yes와 wins hook에 정의된 스크립트로 도메인 컨트롤러로 구성된 경우, Samba는 수신된 NetBIOS 이름을 정화하지 못합니다. 인증되지 않은 공격자는 셸 메타문자예: 명령어를 포함하는...