3959 matches found
PortGuard
Port-Guard Port-Guard — это инструмент управления и защиты USB-портов , предназначенный для Debian. Он позволяет контролировать доступ к USB-устройствам , вести персонализированный белый список и выполнять автоматическое фоновое сканирование для обнаружения несанкционированных подключений. ⚠️...
KOOBE-Guard
KOOBE-Guard: カーネル二重解放脆弱性の能動的時間的緩和 著者: Vedant Karande & Kiran Kumari コース: ネットワーク＆システムセキュリティ SIL7165 - インド工科大学デリー校 概要 KOOBE-Guardは、Linuxローダブルカーネルモジュール（LKM）として開発された動的侵入防止システム（IPS）であり、壊滅的なヒープベースの脆弱性、特にCVE-2024-1086二重解放脆弱性を積極的に緩和することを目的としていますcite: 1。...
CVE-2026-84809
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...
CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...
EUVD-2026-70224
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...
CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...
CVE-2026-84809
Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...
copyfail-guard
copyfail-guard 자동화된 탐지 및 완화 도구로, Linux 커널의 algifaead 모듈AFALG 인터페이스에서 발생하는 로컬 권한 상승LPE 취약점 CVE-2026-31431 "Copy Fail"을 위한 것입니다. ⚠️ 범위: 이 프로젝트는 순수하게 방어적 입니다. 익스플로잇 코드를 포함하거나, 생성하거나, 참조하지 않습니다. 목표는 보안 팀과 시스템 관리자가 1 노출된 호스트를 식별하고 2 패치된 커널이 설치될 때까지 권장 완화 조치algifaead 모듈 차단를 적용할 수 있도록 하는 것입니다. 이 도구가 수행하는...
nah v1.4.0
expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool calls before they run...
RDP-Guard
RDP Guard RDP Guard는 Windows 보안 로그에서 실패한 RDP 로그인 시도를 모니터링하고, 악성 원격 IP 주소를 Windows 방화벽을 통해 차단합니다. 기본값 이벤트 ID: 4625 로그온 유형: 3 또는 10 임계값: 3회 이상의 감사 실패 확인 간격: 15분 방화벽 규칙 이름: RDPGUARDyyyyMMddHHmmssfff 확인 중 차단할 IP가 발견되면 모든 IP가 단일 인바운드 방화벽 규칙에 remoteip 범위로 기록됩니다. IP가 이미 활성화된 광범위한 인바운드 차단 규칙에 포함되어 있으면 새...
NativeBypassCredGuard
NativeBypassCredGuard NativeBypassCredGuard는 ntdll.dll이 내보내는 NTAPI 함수만 사용하여 WDigest.dll을 패치함으로써 Credential Guard를 우회하도록 설계된 도구입니다. C과 C++ 두 가지 버전으로 제공됩니다. 이 도구는 디스크에 있는 WDigest.dll 파일에서 "39 ?? ?? ?? ?? 00 8b ?? ?? ?? ?? 00" 패턴을 찾은 다음References 섹션의 첫 번째 게시물에 설명된 대로, 이 패턴은 모든 Windows 버전의 이 파일에 존재합니...
CVE-2026-84207 Heym before 0.0.98 SSRF via WebSocket endpoints
Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket...
EUVD-2026-69295
Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket...
CVE-2026-82744
Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...
CVE-2026-82744
ash-project ash (Elixir library) contains a Failing Open vulnerability in Ash.Reactor.ChangeStep (lib/ash/reactor/steps/change_step.ex). When a where guard controlling a change step raises an exception (e.g., on attacker-influenced input), the rescue in apply_validation converts it to {:error, er...
CVE-2026-82744 Ash.Reactor change step fails open, skipping a change when its where guard raises
Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...
CVE-2026-82744 Ash.Reactor change step fails open, skipping a change when its where guard raises
Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...
EUVD-2026-68949
Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...
cve-2026-45033-class
Claude Code — git bare-repo / core.fsmonitor 가드 우회 PoC "악성 베어 git 저장소 →core.fsmonitor → 코드 실행" 취약점 클래스GitHub Copilot CLI의 CVE-2026-45033 참조를 Claude Code 에서 재현한 개념 증명PoC으로, Copilot에는 없던 Claude Code의 추가 bash 권한 가드를 무력화합니다. 결과: 에이전트가 가드 검사를 우회해 파일이 심어진 저장소에서 git 명령을 실행하면 Claude Code 샌드박스 내부에서 코드가 실행...
CVE-2021-24155.rb
WordPress-Backup-RCE Этот модуль Metasploit позволяет атакующему с привилегированной учетной записью WordPress запустить обратную оболочку reverse shell из-за уязвимости произвольной загрузки файлов в плагине WordPress Backup Guard версий до 1.6.0. Это вызвано некорректной проверкой расширения...