2864 matches found
beelzebub
Beelzebub Deception Runtime Framework Beelzebub is an open-source deception runtime that deploys adaptive, LLM-powered decoy services across SSH, HTTP, TCP, TELNET, and MCP protocols. It goes beyond passive honeypots by actively engaging attackers in realistic interactions, collecting high-fideli...
Gpt-Agreement-Payment
简体中文 | English Gpt-Agreement-Payment Herramienta de reproducción de extremo a extremo del protocolo de suscripción ChatGPT Plus / Team: desde la captura de paquetes hasta invertir toda la cadena Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE, e implementarl...
public-research
Investigación Pública Investigación de código abierto y charlas sobre inteligencia de amenazas, fingerprinting y detección de fraude. Charlas 10/25/2024 - Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies 03/27/2025 - Anti-Fraud W3 Community Group - Mitigating...
tirreno
tirreno tirreno es un framework de seguridad. tirreno tir.ˈrɛ.no ayuda a comprender, monitorear y proteger tu producto frente a amenazas, fraude y abuso. Mientras que la ciberseguridad clásica se centra en la infraestructura y el perímetro de red, la mayoría de las brechas ocurren a través de...
fraud-bridge
Introducción fraud-bridge ayuda a eludir entornos de censura restrictivos que bloquean conexiones TCP o UDP directas, configurando túneles ICMP, NTP o DNS sobre IPv4 o IPv6. Automáticamente parchea la opción TCP MSS para lograr un flujo no fragmentado de paquetes conocido como MSS-clamping para...
Security Bulletin: IBM Cyber Fraud includes components with multiple known vulnerabilities
Summary IBM Cyber Fraud includes components with known vulnerabilities. These have been addressed in release 1.1.0. Vulnerability Details CVEID:CVE-2026-9825 DESCRIPTION: IBM Cyberfraud has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections,...
CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay
CVE-2026-21010 – VoIP SIP Digest Authentication Replay Program Code Python SIP sim sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set @app.route'/call',...
CVE-2026-96838
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
CVE-2026-96838 WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
EUVD-2026-89890
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
CVE-2026-96838 WordPress Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Blacklist Manager WooCommerce Anti-Fraud, Blacklist & Checkout Verification = 2.3.1 versions...
CVE-2026-96838
The Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin for WordPress (versions
CVE-2026-100872
Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during cart recalculation, allowing unauthenticated attackers to modify order totals after gateway transaction initiation. Attackers can pay a small amount, enlarge the order after gateway capture, and have the system mark t...
CVE-2026-77999 Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - The PayPal IPN listener's signature check validateIPN accepted UNVERIFIED and any non-INVALID response as valid, made its verificati...
CVE-2026-77999: External Control of Assumed-Immutable Web Parameter
Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - The PayPal IPN listener's signature check validateIPN accepted UNVERIFIED and any non-INVALID response as valid, made its verificati...
PT-2026-85010
Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - The PayPal IPN listener's signature check validateIPN accepted UNVERIFIED and any non-INVALID response as valid, made its verificati...
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
Threat actors with ties to the Democratic People's Republic of Korea aka DPRK or North Korea have been observed seeking job opportunities beyond the information technology IT sector, with recent investigations identifying suspected workers employed in sales and marketing and the medical professio...
INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
An eight-month INTERPOL operation targeting West African organized crime groups has led to arrests of 58 people and the identification of 263 suspects. "The operation, which brought together 22 countries from six continents, is a response to the escalating global threat posed by West African...
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors. The vast majority of the targets are located in Brazil, Bolivia, China,...
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad...