FML-Network

FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Paper: FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Dataset: FLNET2023 Introduction FLNET2023 is a state-of-the-art benchmark dataset for intrusion detection systems, specifically fo...

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connectopenid-connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or...

anomaly-flow

Anomaly-Flow Framework for implementing Intrusion Detection Systems NIDS aimed at identifying anomalies in network flows using Machine Learning models. Reference paper: Anomaly-Flow: A Multi-domain Federated Generative Adversarial Network for Distributed Denial-of-Service Detection Create the...

Mandiant-Azure-AD-Investigator

Mandiant Azure AD Investigator Focusing on UNC2452 TTPs Overview This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity. Some indicators are "high-fidelity" indicators of compromise, while other artifacts are so calle...

EUVD-2026-107654

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the editfederatedproviders capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches fr...

CVE-2026-76297

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the editfederatedproviders capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches fr...

CVE-2026-76297

Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16 are vulnerable to a Cross-Site Request Forgery (CSRF) in Splunk Web. An unauthenticated attacker could trick a user with the edit_federated_providers capability into turning off all federated search providers. The root cause is ...

CVE-2026-76297 Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the editfederatedproviders capability into turning off all federated search providers. Successful exploitation could temporarily prevent federated searches fr...

EUVD-2026-106843

Vulnerability in Oracle Essbase component: Federated Partitions. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks m...

nextcloud-federated-ocm-token

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · nextcloud-federated-ocm-token nextcloud-federated-ocm-token Nextcloud Server 35.0.0 - Nextcloud GmbH A federated share secret is minted as an unscoped PERMANENTTOKEN app password for the sharer. The recipient API...

CVE-2026-91656

Vulnerability in Oracle Essbase component: Federated Partitions. The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While the vulnerability is in Oracle Essbase, attacks m...

CVE-2026-91656

A vulnerability exists in the Federated Partitions component of Oracle Essbase version 21.8.3.0.0 . A low privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can lead to unauthorized access to critical data , unauthorized update...

pvbrf-id

PVBRF-ID: Private, Verifiable and Byzantine-Robust Federated Intrusion Detection for Oilfield Enterprise Networks Simulation code, raw results and figure scripts for the paper Mustafa S. Aljumaily, Ali Ataeemh Allami, Mustafa N. Mnati, Nawar S. Alseelawi, Shahab Abdulla, "PVBRF-ID: Private,...

PT-2026-120120

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.3.0.0 Description An issue exists in the Federated Partitions component that allows a low privileged attacker with network access via HTTP to compromise the system. This flaw can lead to unauthorized access to...

CVE-2025-10149

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...

CVE-2025-10149

Multiple WSO2 products are vulnerable to arbitrary operations via SCIM 1.1 or 2.0 endpoints due to insufficient authorization validation for federated users. When a federated user and a local user share the same username, the federated user can perform actions intended for the local account, pote...

EUVD-2025-211118

The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions intended for a local user, including...

PT-2026-117486

Name of the Vulnerable Software and Affected Versions WSO2 Identity Server affected versions not specified Description An authorization flaw exists in the SCIM 2.0 and SCIM 1.1 endpoints where the system fails to sufficiently validate authorization for federated users interacting with the local...

CVE-2026-55103

Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, inbound ActivityPub processing does not sufficiently verify that the actor authenticated by the signed request matches the Activity actor and owns the referenced federated post. ...

CVE-2026-55103 Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening

Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, inbound ActivityPub processing does not sufficiently verify that the actor authenticated by the signed request matches the Activity actor and owns the referenced federated post. ...