EIPP

EIPP 禁止パスワードリスト Entra ID Password Protection の Banned Password List（BPL）を操作するためのツールです。 グローバル BPL のエントリを含む eipp-global-bpl.txt は、2024-04-11 にダンプされました。 詳細情報: https://www.synacktiv.com/en/publications/entra-id-banned-password-lists-password-spraying-optimizations-and-defenses EIPPDecrypt...

combobulator

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...

PowerShell-Suite

PowerShell-Suite 優れたツールやリソースがオンラインにあり、PowerShellでほとんどすべてのタスクを達成できます。しかしながら、特定の目的のためにユーティリティをスクリプトでまとめたり、存在論的なギャップを埋める必要がある場合もあります。これは、私が楽しみのため、または特定の用途を念頭に置いてまとめたPowerShellユーティリティのコレクションです。 したがって、それらから得られる成果は人それぞれ異なるかもしれませんが、遠慮なく問題を投稿したり、フォークして適用したりしてください！ Windows API PowerShellからWindows...

home_SOC_suite

Home SOC Suite — Night's Watch 個人用セキュリティオペレーションセンター（SOC）で、Anwendungsentwicklung再訓練プログラムの一環としてゼロから構築されました。このスイートは、Windowsエンドポイントのネットワーク異常、リソーススパイク、プロセス実行、レジストリ変更、セキュリティイベントログアクティビティ、スケジュールタスク変更、DNSクエリ、および電源イベントを監視し、すべてを構造化ファイルに記録して、Pythonエンジンによる週次分析と相関を可能にします。...

checker-cve2020-3452

Checker CVE-2020-3452 この Python スクリプトは、対象サーバーが CVE-2020-3452 に対して脆弱かどうかをチェックします。Cisco Adaptive Security Appliance および FTD の不正なリモートファイル読み取り Cisco Adaptive Security Appliance ASA ソフトウェアおよび Cisco Firepower Threat Defense FTD ソフトウェアの Web サービス...

GHSA-4RF6-QX84-Q9FV Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...

Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. The height is take...

GHSA-J5CX-PH8G-95V3 Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. The height is take...

DAMM

DAMM Volatilityの上に構築されたオープンソースのメモリ分析ツールです。コミュニティに提供するための興味深い新しい技術の試験場となることを目的としています。これらの技術は、データ削減と専門知識の形式化を通じて調査プロセスを高速化するための試みです。 目次 機能 使い方 対応プラグイン 例 差分 一意IDの操作 フィルタリング 警告 最後に 機能 約30のVolatilityプラグインが約20のDAMMプラグインに統合されています（例：pslist、psxview、その他の要素は'processes'プラグインに統合されています） 1回の呼び出しで複数のプラグインを実行できます...

Important: Red Hat Security Advisory: sudo security, bug fix, and enhancement update

An update for sudo is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

sudo: Sudo: Policy bypass allows unauthorized program execution via execveat

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

Should you care about an “AI slowdown?”

Welcome to this week's edition of the Threat Source newsletter. There's been a lot of talk recently about slowing down the pace of AI development. And yes, there are legitimate moral, ethical, geopolitical, and safety concerns with the use of AI. It's not clear yet whether an AI slowdown could...

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 7, 2026 to September 13, 2026)

Last week, there were 260 vulnerabilities disclosed in 207 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 147 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to...

BlockGuard

🛡️ BlockGuard — プロセスベースのファイルアクセスセキュリティエージェント BlockGuard は、Windows のデータ損失防止（DLP）エージェントであり、プロセスレベルでファイルアクセスを傍受・制御します。実行可能ファイルパス、暗号ハッシュ、Authenticode 署名、整合性レベルによって識別される承認済みプロセス のみが保護されたファイルを読み取れるようにし、それ以外のすべてのプロセスは NTFS ACL を介して OS カーネルレベルでデフォルト拒否 されます。 📑 目次 特徴 アーキテクチャ UI 管理インターフェース 前提条件 クイックスタート 設定...

CVE-2026-93144

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

DEBIAN-CVE-2026-93144

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

AZL-102489 CVE-2026-93144 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF pointers checkptrtobtfaccess lets program-type btfstructaccess callbacks validate writes before the default BTF access path rejects non-read accesses. That bypasses the read-only policy fo...

DEBIAN-CVE-2026-93135

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject programs with inlined helpers if JIT is not available When an architecture such as LoongArch, ARM64, and RISC-V implements bpfjitinlineshelpercall, the verifier skips rewriting the helper call offset insn-imm in...

AZL-102962 CVE-2026-93137 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free on mmstruct in bpffindvma bpffindvma reads task-mm and calls mmapreadtrylockmm without holding a reference on the mm. On a foreign task, a concurrent exitmm can free the mmstruct between the lockless read...