power-pwn

由以下机构维护： 保护无处不在的 AI 代理。 概述 Power Pwn 是一个用于 Microsoft 365 Power Platform 和 AI 服务的进攻与防御安全工具集。 主要功能（包括但不限于）： 💾 PowerDump ：全面的租户扫描与数据收集 🚪 BackDoor ：部署后门流以持久访问 Power Platform 环境 🦠 NoCodeMalware ：无需编写代码即可创建和部署恶意 Power Platform 构件 🎣 PowerPhishing ：滥用 Power Platform 进行钓鱼攻击和凭据窃取 🤖 Copilot Studio Hunter...

TokenFlare

TokenFlare 无服务器 AITM 钓鱼模拟框架（用于 Entra ID / M365） 功能特点 精简：核心逻辑（src/worker.js 中仅约 530 行 JavaScript）。 模块化：支持多种 OAuth 流程，并内置 Intune 条件访问绕过 支持 易于调整：通过半交互式 tokenflare configure campaign 子命令，设置客户端品牌、URL 结构（自定义诱饵路径和参数）、完成认证后的最终重定向等。 本地或远程部署：支持使用 Certbot 为您获取 SSL 证书，或直接部署到 CF。 内置 OpSec：阻止机器人和爬虫，您的钓鱼活动不会在 1...

AzureRedOps

AzureRedOps 一款用于 Azure / Entra ID 红队作战的瑞士军刀式工具。 作者: Mr.Un1k0d3r TrueCyber Inc 版本: 0.1 语言: Python 3.12+ 概述 AzureRedOps 是一款用于评估 Microsoft Entra ID 和 Azure 租户安全状况的进攻性安全工具包。它将最常见的红队工作流程——身份验证、令牌管理、目录枚举、权限检查、密码喷洒以及针对 Microsoft Graph 的后渗透操作——封装在一个统一的、由 --activity 驱动的 CLI 背后。 每个操作都通过 -a/--activity...

anomaly-flow

Anomaly-Flow Marco de trabajo para implementar Sistemas de Detección de Intrusiones NIDS orientados a identificar anomalías en flujos de red utilizando modelos de Aprendizaje Automático. Artículo de referencia: Anomaly-Flow: Una Red Generativa Adversarial Federada Multi-dominio para la Detección ...

kestrel-lang

.. image:: https://github.com/opencybersecurityalliance/kestrel-lang/raw/develop/logo/logowtext.png :width: 460 :alt: Kestrel威胁狩猎语言 |readthedocs| |pypi| |downloads| |codecoverage| |black| | 使用原生查询/脚本（左）还是Kestrel（右）进行狩猎？ 一次端到端的网络威胁狩猎通常需要在多个数据源/环境中执行，并在狩猎流程中的任意位置进行 enrichment/ML/可视化步骤。 .. image::...

Multimodal-web-attack-Dataset

MWAD: Un conjunto de datos multimodal de ataques web para la detección de inyección SQL basada en IA Descripción general El conjunto de datos multimodal de ataques web MWAD es un novedoso conjunto de datos etiquetado de ciberseguridad desarrollado como parte de la investigación del autor en...

EUVD-2026-75781

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

axios: Axios: Information disclosure of proxy credentials via redirect flows

A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final...

CVE-2026-81211

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

CVE-2026-81211 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...

CVE-2026-81211

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary Python code execution by a remote authenticated attacker. The root cause is a missing authorization check (CWE-862): the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY policy is enforced on the direct custom-component endpoint but n...

PT-2026-89628

🚨 CVE-2026-81211 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows. 🎖@cveNotify...

CVE-2026-19294

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private flow due to improper authorization...

CVE-2026-19294

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private flow due to improper authorization...

CVE-2026-19294

IBM Langflow OSS versions 1.0.0 through 1.11.1 are affected by an improper authorization flaw (CWE-639). Deprecated build endpoints remain fully routed but lack the object-level ownership check present on the modern equivalent endpoint, allowing any authenticated user to enumerate and execute ano...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: fqpie: avoid stalls in fqpietimer When setting a high number of flows limit being 65536, fqpietimer is currently using too much time as syzbot reported. Add logic to yield the cpu every 2048 flows less than 150 usec on...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Check for the NOTREADY flag state after locking Currently, the check for the NOTREADY flag is performed before obtaining the necessary lock. This creates a possibility for race conditions when the flow is concurrently...

Malicious code in @or-sdk/flows (npm)

npm/@or-sdk/flows is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

EUVD-2026-47050

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Site Hierarchy Flows. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful...

CVE-2026-60697

Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite component: Site Hierarchy Flows. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful...