m3

m3 一个简单且可扩展的Android僵尸网络模拟框架。详细的解释可以在这里找到。该项目首次发表于Black Hat Europe 2021's Arsenal。 除了代码中的文档（包括内联文档和JavaDoc），还可以在这里了解更多关于扩展框架的内容。目前实现的两个家族，Anubis和Cerberus，在这里有详细解释。问题可以通过Twitter @Libranalysis（公开或私信）提出，或者在本仓库中打开issue。...

DVWA

翻译 翻译：@inVains @songzy12 @cnskis 关于 DAMN VULNERABLE WEB APPLICATION（DVWA） Damn Vulnerable Web Application DVWA译注：可以直译为："该死的"不安全Web应用程序，是一个编码差的、易受攻击的 PHP/MySQL Web应用程序。 它的主要目的是帮助信息安全专业人员在合法的环境中，练习技能和测试工具，帮助 Web 开发人员更好地了解如何加强 Web 应用程序的安全性，并帮助学生和教师在可控的教学环境中了解和学习 Web 安全技术。 DVWA的目的是通过简单明了的界面来练习一些最常见的...

openvpn-install

openvpn-install Instalador de OpenVPN para Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux y AlmaLinux. Este script te permitirá configurar y gestionar tu propio servidor VPN seguro en solo unos segundos. ¿Qué es esto? Este script está pensado para...

hermes-osint

Hermes OSINT v3.0 🏛️🧠 The Agentic OSINT Analyst Conversational AI-driven investigations. Natural language. Expert results. 🤖✨ What's New in v3.0 🎉 Hermes 3.0 represents a complete paradigm shift from pipeline-based tool orchestration to a conversational AI-driven investigation platform. Powered by...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

kernel: nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path

A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. When a data digest mismatch occurs, a reference count underflow can happen due to an unconditional cleanup call. This issue can lead to a use-after-free condition and ultimately result in a permanent workqueue deadlock...

kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry

A flaw was found in the Linux kernel's Intel VT-d Virtualization Technology for Directed I/O Scalable Mode. When a Process Address Space ID PASID table entry is being removed, the system may attempt to clear the entry before properly signaling to the hardware that the entry is no longer active...

kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap

A flaw was found in the Linux kernel's RDMA/rxe component. A race condition in the rxemmap function, which manages memory for Remote Direct Memory Access RDMA operations, can lead to a use-after-free vulnerability. A local attacker could exploit this timing issue to cause a system crash, resultin...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

doggie

Doggie 和 evilDoggie 项目概述 Doggie 是一个开源、模块化项目，旨在构建一个 DIY CAN 总线到串行适配器（USB、BLE、UART）。它使用 slcan 协议（CAN over Serial）将计算机连接到 CAN 总线网络，以兼容 SocketCAN 和 Python-can 等工具。该项目强调模块化，支持多种微控制器（例如 RP2040、STM32F103C8、ESP32）和 CAN 控制器（内置或 MCP2515）。 evilDoggie 是 Doggie 的攻击性固件变体，专为汽车安全研究和底层 CAN...

CGA-7M59-5RJF-M974

Bulletin has no description...

CGA-838R-H9WJ-69G3

Bulletin has no description...

CGA-MFMQ-X872-2HRC

Bulletin has no description...

CGA-8P2M-RR39-73WG

Bulletin has no description...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

Neo

El Framework Neo C2 Un framework de post-explotación con arquitectura modular cliente-servidor, diseñado para la gestión colaborativa de agentes en operaciones de red team y pruebas de seguridad. Permite flexibilidad al permitir que los operadores añadan sus propios módulos de extensión Instalaci...

Active-Directory-Exploitation-Cheat-Sheet

Hoja de referencia de Active Directory Este repositorio contiene una metodología general en el entorno de Active Directory. Se ofrece con una selección de comandos rápidos de las herramientas más eficientes basadas en Powershell, C, .Net 3.5 y .Net 4.5. Proceso General: Reconocimiento Enumeración...

CVE-2026-96259

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the...

CVE-2026-94450

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packet...

CVE-2026-76910

Unleash is an open-source feature management platform. Prior to 8.0.3, cloneFeatureToggle and POST /api/admin/projects/:projectId/features/:featureName/clone authorize creation in the destination project but do not verify access to the source project. Because feature names are globally unique, a...