Lucene search
+L

3959 matches found

Kitploit
Kitploit
added 2026/09/02 10:14 p.m.6 views

PortGuard

Port-Guard Port-Guard — это инструмент управления и защиты USB-портов , предназначенный для Debian. Он позволяет контролировать доступ к USB-устройствам , вести персонализированный белый список и выполнять автоматическое фоновое сканирование для обнаружения несанкционированных подключений. ⚠️...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 6:03 p.m.3 views

KOOBE-Guard

KOOBE-Guard: カーネル二重解放脆弱性の能動的時間的緩和 著者: Vedant Karande & Kiran Kumari コース: ネットワーク&システムセキュリティ SIL7165 - インド工科大学デリー校 概要 KOOBE-Guardは、Linuxローダブルカーネルモジュール(LKM)として開発された動的侵入防止システム(IPS)であり、壊滅的なヒープベースの脆弱性、特にCVE-2024-1086二重解放脆弱性を積極的に緩和することを目的としていますcite: 1。...

7.8CVSS6.9AI score0.28058EPSS
SaveExploits16References1
NVD
NVD
added 2026/09/02 5:18 p.m.7 views

CVE-2026-84809

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

7.1CVSS0.00315EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/02 4:59 p.m.5 views

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

7.1CVSS6.2AI score
SaveExploits0References9
EUVD
EUVD
added 2026/09/02 4:59 p.m.8 views

EUVD-2026-70224

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

7.1CVSS6.2AI score0.00315EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/02 4:59 p.m.30 views

CVE-2026-84809 Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding pycache directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside maliciou...

7.1CVSS0.00315EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/02 4:59 p.m.12 views

CVE-2026-84809

Tencent AI-Infra-Guard 's skill-scan component (affected in v4.6.0) hardcodes __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. An attacker can distribute a skill containing benign Python source files alongside malicious compiled bytecode tha...

7.1CVSS6.2AI score0.00315EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/02 11:34 a.m.5 views

copyfail-guard

copyfail-guard 자동화된 탐지 및 완화 도구로, Linux 커널의 algifaead 모듈AFALG 인터페이스에서 발생하는 로컬 권한 상승LPE 취약점 CVE-2026-31431 "Copy Fail"을 위한 것입니다. ⚠️ 범위: 이 프로젝트는 순수하게 방어적 입니다. 익스플로잇 코드를 포함하거나, 생성하거나, 참조하지 않습니다. 목표는 보안 팀과 시스템 관리자가 1 노출된 호스트를 식별하고 2 패치된 커널이 설치될 때까지 권장 완화 조치algifaead 모듈 차단를 적용할 수 있도록 하는 것입니다. 이 도구가 수행하는...

7.8CVSS5.4AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
added 2026/09/02 5:01 a.m.4 views

nah v1.4.0

expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool calls before they run...

6AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/02 3:14 a.m.5 views

RDP-Guard

RDP Guard RDP Guard는 Windows 보안 로그에서 실패한 RDP 로그인 시도를 모니터링하고, 악성 원격 IP 주소를 Windows 방화벽을 통해 차단합니다. 기본값 이벤트 ID: 4625 로그온 유형: 3 또는 10 임계값: 3회 이상의 감사 실패 확인 간격: 15분 방화벽 규칙 이름: RDPGUARDyyyyMMddHHmmssfff 확인 중 차단할 IP가 발견되면 모든 IP가 단일 인바운드 방화벽 규칙에 remoteip 범위로 기록됩니다. IP가 이미 활성화된 광범위한 인바운드 차단 규칙에 포함되어 있으면 새...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/01 4:56 p.m.5 views

NativeBypassCredGuard

NativeBypassCredGuard NativeBypassCredGuard는 ntdll.dll이 내보내는 NTAPI 함수만 사용하여 WDigest.dll을 패치함으로써 Credential Guard를 우회하도록 설계된 도구입니다. C과 C++ 두 가지 버전으로 제공됩니다. 이 도구는 디스크에 있는 WDigest.dll 파일에서 "39 ?? ?? ?? ?? 00 8b ?? ?? ?? ?? 00" 패턴을 찾은 다음References 섹션의 첫 번째 게시물에 설명된 대로, 이 패턴은 모든 Windows 버전의 이 파일에 존재합니...

5.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 3:19 p.m.30 views

CVE-2026-84207 Heym before 0.0.98 SSRF via WebSocket endpoints

Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket...

5.4CVSS0.002EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/01 3:19 p.m.8 views

EUVD-2026-69295

Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket...

5.4CVSS5.9AI score0.002EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/01 4:18 a.m.6 views

CVE-2026-82744

Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...

2.1CVSS0.00133EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 3:39 a.m.12 views

CVE-2026-82744

ash-project ash (Elixir library) contains a Failing Open vulnerability in Ash.Reactor.ChangeStep (lib/ash/reactor/steps/change_step.ex). When a where guard controlling a change step raises an exception (e.g., on attacker-influenced input), the rescue in apply_validation converts it to {:error, er...

2.1CVSS5.8AI score0.00133EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/01 3:39 a.m.37 views

CVE-2026-82744 Ash.Reactor change step fails open, skipping a change when its where guard raises

Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...

2.1CVSS0.00133EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 3:39 a.m.3 views

CVE-2026-82744 Ash.Reactor change step fails open, skipping a change when its where guard raises

Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...

2.1CVSS5.8AI score0.00133EPSS
SaveExploits0References9
EUVD
EUVD
added 2026/09/01 3:39 a.m.7 views

EUVD-2026-68949

Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...

2.1CVSS5.8AI score0.00133EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/31 10:21 p.m.4 views

cve-2026-45033-class

Claude Code — git bare-repo / core.fsmonitor 가드 우회 PoC "악성 베어 git 저장소 →core.fsmonitor → 코드 실행" 취약점 클래스GitHub Copilot CLI의 CVE-2026-45033 참조를 Claude Code 에서 재현한 개념 증명PoC으로, Copilot에는 없던 Claude Code의 추가 bash 권한 가드를 무력화합니다. 결과: 에이전트가 가드 검사를 우회해 파일이 심어진 저장소에서 git 명령을 실행하면 Claude Code 샌드박스 내부에서 코드가 실행...

8.5CVSS7.6AI score0.0035EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 6:40 p.m.5 views

CVE-2021-24155.rb

WordPress-Backup-RCE Этот модуль Metasploit позволяет атакующему с привилегированной учетной записью WordPress запустить обратную оболочку reverse shell из-за уязвимости произвольной загрузки файлов в плагине WordPress Backup Guard версий до 1.6.0. Это вызвано некорректной проверкой расширения...

7.2CVSS7.5AI score0.84112EPSS
SaveExploits9
Rows per page
Query Builder