CVE-2012-4681-Armoring

CVE-2012-4681-Armoring Обзор Эксперимент по ручному бронированию для обхода антивирусов для CVE-2012-4681, вдохновлённый http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html. Базовый эксплойт: http://pastie.org/4594319 Результаты по состоянию на 26.09.2014 и...

clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

experiments

Эксперименты Репозиторий различных экспериментов / PoC. debugging-secure-kernel: PoC отладки безопасного ядра Windows 10 с помощью gdb на базе QEMU KVM dns: Эксперименты, касающиеся DNS / Certificate transparency / Homoglyphs Attack Surface Reduction: Разбор внутреннего устройства Windows Attack...

CopyFail-Experiment

Просто эксперимент для проверки того, что LLM может найти эту уязвимость и собрать рабочий эксплойт. Использование gcc -o poc poc.c ./poc...

os-experiment-4

os-experiment-4 Эксперимент по ОС 4 CVE-2016-5195 ./run.sh...

CVE-2017-1000117-sl

CVE-2017-1000117-sl Эксперимент с CVE-2017-1000117 использование $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117-sl.git...

cve-2021-44228

cve-2021-44228 Это архив промежуточной работы по курсу «Лаборатория анализа уязвимостей» третий курс, осень–зима Аньхойского университета. Полная документация размещена по адресу https://testgames.me/2024/11/10/cve-2021-44228/...

curveball-plus

curveball-plus эксперимент по моделированию атак Curveball CVE-2020-0601 с использованием неявных сертификатов ECQV и верификаторов, подобных Windows Этот файл постоянно обновляется!...

EUVD-2026-78207

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text,...

PT-2026-85556

Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches arbitrary methods through getattr without allowlist validation. Unauthenticated attackers can register clients, instantiate Repo resources, and invoke arbitrary methods to read experiments or delete runs...

Malicious Package

Overview amplitude-experiment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in amplitude-experiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110901fcd2d59ab6eed44d962da05830610e5c3cb03ca103db5a379e6c6052e4 package.json declares a single dependency whose key equals the package's own name amplitude-experiment and whose source is the bare HTTPS URL...

MAL-2026-15496 Malicious code in amplitude-experiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110901fcd2d59ab6eed44d962da05830610e5c3cb03ca103db5a379e6c6052e4 package.json declares a single dependency whose key equals the package's own name amplitude-experiment and whose source is the bare HTTPS URL...

firstflagPOISONED

ExploitGym first-flag causality experiment This repository te...

Anatomy of a Scam Call: What 10,000 Real Scam and Spam Calls Reveal about How Phone Scammers Operate

Telephone fraud is pervasive and costly, but its inner workings are rarely observed at scale. We analyze a complete corpus of 10,211 inbound scam and spam calls -- 913 hours of audio and 330,956 transcribed turns from 5,780 distinct numbers -- collected over 54 days by an AI voice-agent honeypot...

EUVD-2026-62963

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer REST API. The vulnerability is possible because Splunk AI Toolkit deletes...

EUVD-2026-62962

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolkit does not preserve the trusted experiment scope...

CVE-2026-76397

In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all relevant data in experiment history, including data associated with other users. The vulnerability is possible because Splunk AI Toolkit does not preserve the trusted experiment scope...

CVE-2026-76398

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer REST API. The vulnerability is possible because Splunk AI Toolkit deletes...

CVE-2026-76398 Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit

In Splunk AI Toolkit versions below 6.0.1, a user who does not hold the "admin" or "power" Splunk roles could delete the experiment history of another user without permission through the Representational State Transfer REST API. The vulnerability is possible because Splunk AI Toolkit deletes...