inside-pegasus

ペガサスの内部： WhatsApp対NSOグループ の主要文書 NSOグループの内部文書、製品資料、宣誓証言を厳選したもので、 WhatsApp Inc. および Meta Platforms, Inc. 対 NSO Group Technologies Limited および Q Cyber Technologies Limited （事件番号 4:19-cv-07123-PJH、米国カリフォルニア北部地区連邦地方裁判所）の公開記録に登録されたものです。 このリポジトリは、Amnesty InternationalのSecurity Labが、Forbidden...

androidqf

androidqf androidqf Android Quick Forensics는 Android 기기에서 관련 법의학 데이터를 쉽게 수집할 수 있는 휴대용 도구입니다. androidqf는 Android 기기에서 데이터를 신속하게 수집할 수 있는 간단하고 휴대 가능한 크로스 플랫폼 유틸리티를 제공하기 위해 설계되었습니다. 기능적으로는 mvt-android와 유사합니다. 그러나 MVT와 달리 androidqf는 기술에 익숙하지 않은 사용자도 쉽게 실행할 수 있도록 설계되었습니다. androidqf로 추출된 데이터는 MVT로 분석할 ...

mvt

Mobile Verification Toolkit !IMPORTANT 最近我们合并了「v3」分支。这引入了破坏性变更。如果您在其他脚本中依赖 mvt 的输出，它们可能会失效。更多详情：https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit（MVT）是一组实用工具，用于简化和自动化收集取证痕迹的过程，以帮助识别 Android 和 iOS 设备可能遭受的入侵。 该工具由国际特赦组织安全实验室在飞马计划的背景下于 2021 年 7...

investigations

調査 このリポジトリには、アムネスティ・インターナショナルが人権活動家に対する標的型脅威について実施した技術調査の一部から抽出された侵害指標（IOC）が含まれています。 これらの指標は、CC-BY ライセンスの下で共有されています。...

CVE-2026-92598

A flaw was found in Nodemailer. This vulnerability arises from the failure to properly apply UTS-46 normalization when encoding international domain names. A remote attacker can exploit this by crafting recipient addresses with invisible characters or compatibility mappings. This allows them to...

commend_sqli

CVE-2023-XXXXX 推奨される説明 G8-VOIPREC Commend VoIPRec のWebインターフェースは、ログインページの "Code" パラメータにおいて、時間ベースのブラインドSQLインジェクションに対して脆弱です。 追加情報 PoC: POST /cgi-bin/SecComRecX.cgi HTTP/1.1 Host: 192.168.88.10 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: application/json,...

Astra Linux – Vulnerability in Chromium

The double-free operation in the ICU of Google Chrome before version 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

CVE-2026-19425 Win Men Intermational｜Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

EUVD-2026-54835

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the macfilter function that allows remote attackers to execute arbitrary commands on the affected device. Attackers can exploit the macfilter function to inject malicious commands and obtain root...

Security Bulletin: IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. (CVE-2026-18097)

Summary IBM® Db2® could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. Vulnerability Details CVEID:CVE-2026-18097 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to obtain...

EUVD-2026-53922

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...

GHSA-8MXV-9XHP-86H4 rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys

Summary The S3 redirect callback strips X-Amz-Security-Token when a redirect changes scheme or host, but it does not strip IBM IAM bearer authorization or customer-provided encryption keys. Two independently validated paths remain: - a same-host HTTPS-to-HTTP redirect preserves Authorization:...

EUVD-2026-53576

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVEs listed in this document might affect some configurations of IBM WebSphere Application Server traditiona...

EUVD-2026-51259

IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...

CVE-2026-12118

IBM webMethods Integration on prem 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments

Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an aim to siphon funds from international firms for more than nine years. According to Russian cybersecurity vendor F6, the threat actors have...

EUVD-2026-50058

IBM Observability with Instana Agent Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API...

EUVD-2026-50013

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 is vulnerable to an information disclosure due to sensitive information being...

CVE-2026-4932

IBM PowerVM Hypervisor vulnerability CVE-2026-4932 affects FW1110.00–FW1110.20 and FW1060.00–FW1060.71. Affects PowerVM Hypervisor and TME hardware; attacker with physical access to Transparent Memory Encryption could decrypt memory due to insufficient cryptographic entropy. Impact is high confid...