CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

CVE-2026-18036 NTRU leaks private key information by reducing secret values with a non-constant-time integer division

In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduction was carried out by an integer division whose latency depends on the secret operand. Polynomial.modQ divided by a...

ThinkCMF_getshell

ThinkCMFgetshell 프레임워크의 임의 콘텐츠 포함 취약점 원격 공격자는 어떠한 권한도 필요 없이 특정 요청 패킷을 구성하여 원격 서버에서 임의의 코드를 실행할 수 있습니다. python 사용법: + python ThinkCMFgetshell.py http://x.x.x.x/ python ThinkCMFgetshell.py https://x.x.x.x/ nginx PHP/7.0.19 Shell url: https://x.x.x.x/0a30e0d61182dbb7c1eed5135787fb84.php?cmd=cat...

autonomous-offensive-llm-handbook

📖 Read the handbook online : follow the lessons from your first fixture run to an agent with clear limits. The model proposes, the code disposes AUTONOMOUS SECURITY / THE BUILDER'S FIELD MANUAL Read the website · Start the course · Run the lab · Connect your model · The build sequence A practical...

vulners-scanner

vulners-scanner 설명 vulners.com API를 사용하는 호스트 기반 취약점 스캐너의 PoC입니다. 운영 체제를 탐지하고 설치된 패키지를 수집하여 취약점을 확인합니다. 지원 OS 현재 다음 운영 체제의 패키지 수집을 지원합니다: 데비안 계열 debian, kali, ubuntu Rhel 계열 redhat, centos, fedora Python 버전 Lazy 및 Advanced 버전은 python2.6, python2.7, python3.5에서 테스트되었습니다. 버그를 발견하시면 주저하지 말고 이슈를 열어주세요...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id CLIENTID --userna...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

atomic-operator

license atomic-operator 이 Python 패키지는 여러 운영 체제 환경에서 Atomic Red Team 테스트Atomics를 실행하는 데 사용됩니다. 새로운 기능? 왜? atomic-operator는 보안 전문가가 atomic-red-team에 정의된 규정된 기술에 대해 탐지 및 방어 기능을 테스트할 수 있도록 합니다. atomic-operator와 같은 테스트 프레임워크를 활용하면 방어 능력과 방어 커버리지의 공백을 모두 식별할 수 있습니다. 또한 atomic-operator는 다음과 같은 다양한 상황에서...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure 인증 우회 CVE-2023-6329 에 대한 Python 개념 증명 익스플로잇으로, Control iD iDSecure 4.7.43.0 이하 버전에서 발견된 부적절한 접근 제어 취약점입니다. 이 결함은 인증되지 않은 원격 공격자가 공개적으로 접근 가능한 값장치 일련번호, 서버에서 제공하는 nonce, 하드코딩된 솔트만을 사용하는 예측 가능한 비밀번호 유도 알고리즘을 악용하여 유효한 로그인 자격 증명을 재구성할 수 있게 합니다. 인증에 성공하면 공격자는 웹...

gha-lab-fb6df3d456

自動化された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、公開されているGitHub Actionsワークフローの脆弱性の再現に関するラヴァル大学の修士論文のために、自動化ハーネスによって構築された使い捨てのラボです。これは、phpgt/Dom のコミット b73d7e8b54963796132df99902c3224016511bb9（2025-03-21）の逐語的なスナップショットであり、そのプロジェクト自身のライセンスの下で再配布されており、そのライセンスファイルはこのスナップショットに変更なしで含まれています。...

tough-cookie-patch-cve-2023-26136

RFC6265 Node.js용 쿠키 및 CookieJar 개요 javascript var tough = require'tough-cookie'; var Cookie = tough.Cookie; var cookie = Cookie.parseheader; cookie.value = 'somethingdifferent'; header = cookie.toString; var cookiejar = new tough.CookieJar; cookiejar.setCookiecookie,...

EphemeralNet

EphemeralNet 적대적 NAT 환경을 위한 맞춤형 릴레이를 갖춘 안전한 P2P 네트워크, C++20으로 구축됨. 고신뢰 P2P 스토리지를 위한 프로그래밍 가능한 망각. 왜 EphemeralNet인가? Shardian은 삭제 보장을 기밀성만큼 중요하게 여기는 팀을 위한 인프라를 설계합니다. EphemeralNet은 반드시 사라져야 하는 데이터를 위한 C++20 연구 데몬입니다. 즉, 강제된 TTLTime-to-Live 의미론을 일급 제약 조건으로 사용하는 P2P 프로토콜입니다. BitTorrent 스타일 스웜을 임시 보존...

RHEL 7 : freerdp (RHSA-2026:74610)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:74610 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

PT-2026-104440

Name of the Vulnerable Software and Affected Versions postgresql-operator charm versions prior to 1189 arm64 and 1190 amd64 in the dev track 14/edge postgresql-operator charm versions prior to 1216 arm64 and 1217 amd64 in the stable track 14/stable Description The postgresql-operator charm utiliz...

Containing the Autonomous Operator: A Defense-In-Depth Framework and Reference Architecture for Securing AI Agents on Kubernetes

Large language model LLM agents are moving from chat interfaces into infrastructure operations, where they read telemetry, call tools, generate and execute code, and change the state of production Kubernetes clusters. This collapses a boundary that conventional cloud-native security assumes: the...

CVE-2026-104055: Insertion of Sensitive Information into Log File

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

RabbitMQ 3.13.x < 3.13.18 / 4.0.x < 4.0.23 / 4.1.x < 4.1.14 / 4.2.x < 4.2.9 / 4.3.x < 4.3.3 Multiple Vulnerabilities

The version of RabbitMQ installed on the remote host is 3.13.x prior to 3.13.18, or 4.0.x prior to 4.0.23, or 4.1.x prior to 4.1.14, or 4.2.x prior to 4.2.9, or 4.3.x prior to 4.3.3. It is, therefore, affected by multiple vulnerabilities: - The JWKS key fetching mechanism in uaajwt.erl does not...

RHEL 8 : gawk (RHSA-2026:73511)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:73511 advisory. The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special- purpose programming language to do...