ProtOSINT

ProtOSINT ProtOSINT는 Proton 메일 계정을 조사하는 데 도움이 되는 Python 스크립트입니다. 버전 이것은 ProtOSINT v2 입니다. 첫 번째 버전은 몇 년 동안 있었지만, Proton의 API가 변경되고 기존 검사가 작동하지 않게 되어 재작성을 통해 도구를 다시 살렸습니다. 그동안 이런 종류의 연구를 계속해준 NeutrOSINT에게 큰 감사를 드립니다. 설명 이 도구는 Proton Mail에 대한 OSINT 작업교육 및 승인된 용도로만 사용을 위해 만들어졌습니다. 이메일 주소, 사용자 이름 또는...

talos

チャット · ディスカッション · ニュースレター · ドキュメント · Ory Networkを試す · 採用情報 Ory Talosは、低遅延な検証、水平スケーリング、予測可能な運用に最適化された、スケーラブルで安全なAPIキーサーバーです。APIキーに関する確立されたセキュリティのベストプラクティスに従い、高スループットシステム向けにAPIキーと短命トークンの発行、検証、失効、導出を行います。 Ory Talosとは？ なぜOry Talosなのか デプロイオプション Ory NetworkでOry Talosを利用する Ory Talosをセルフホストする クイックスタート Or...

Arisu

Arisu — AI Key 自动化采矿系统 Arisu 是一款自动扫描公开代码仓库（GitHub、GitLab、Gitee、Docker Hub、PyPI、npm 等）和代码片段（Gist、Issues、CommonCrawl），提取 AI 服务 API 密钥（DeepSeek、OpenAI、Anthropic、Kimi 等）并验证其有效性及余额的工具。提供 TUI 仪表板和多种输出格式（JSON、CSV、Markdown）。 功能特性 🔍 多源扫描 ：GitHub 代码搜索、Sourcegraph、Gist、Issues、GitLab、Gitee、Docker...

CVE-2026-107675

A flaw was found in FFmpeg. The libssh-based SFTP SSH File Transfer Protocol handler fails to verify remote host keys when establishing connections. A remote network attacker capable of intercepting network traffic could exploit this flaw to impersonate legitimate SFTP servers, potentially exposi...

CVE-2026-42208-Lab

CVE-2026-42208 — LiteLLM 事前認証SQLインジェクションのタイミングPoC CVE-2026-42208（LiteLLM ProxyのAPIキー検証パスにおける事前認証SQLインジェクションの脆弱性）のためのローカルDockerラボおよび最小限の害を伴うPoCです。 このリポジトリは、タイミングベースのPostgreSQL pgsleep 証明を使用して、脆弱なLiteLLMインスタンスとパッチ適用済みLiteLLMインスタンスの違いを示します。 適用範囲: ローカルラボ / 許可されたテストのみ。デフォルトのPoCはデータベースデータのダンプや変更を行いません。...

CVE-2026-107675

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675

Versions of FFmpeg through 9.0.2 are vulnerable to a missing SSH host key verification issue within the libssh-based sftp protocol handler . This flaw allows network attackers to perform man-in-the-middle , DNS, or ARP spoofing to impersonate SFTP servers. Consequences include the ability to capt...

CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

PT-2026-108036

FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords supplied in sftp URLs, serve forged...

CVE-2025-26465

CVE-2025-26465 OpenSSHクライアントは、バージョン6.8p1から9.9p1（両端を含む）の間に論理エラーが存在し、VerifyHostKeyDNSオプションが有効な場合にアクティブな中間者攻撃（MitM）に対して脆弱になります。これにより、悪意のある第三者がクライアントの接続試行時に正規のサーバーになりすますことが可能になります。 この検出方法はどのように機能しますか？ このテンプレートは、以下の脆弱性のあるバージョンにマッチします： - "SSH-2.0-OpenSSH6.8p1" - "SSH-2.0-OpenSSH6.9p1" -...

qubes-secpack

Qubes セキュリティパック qubes-secpack Qubes セキュリティパック qubes-secpack は、Qubes OS プロジェクトに関するセキュリティ関連情報を含む git リポジトリです。以下が含まれます: Qubes PGP 鍵 keys/ Qubes セキュリティ速報 QSBs/ Qubes カナリア canaries/ Qubes 資金情報 fund/ Qubes ISO ダイジェスト digests/ このリポジトリに含まれるファイルは、認証を次の 2 つの方法で行うことができます: git コミットタグの検証 git tag -v...

CVE-2024-45337-POC

CVE-2024-45337-POC CVE-2024-45337 の概念実証 POC ビルド go version go version go1.23.2 linux/amd64 go build 使用方法 Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that will pass verification Must be pub key default...

CVE-2026-77703

The HAVELSAN Inc. Liman Render Engine (versions 1.0 before 1.2-75 ) is vulnerable to an SSH Host Key Verification Bypass due to a key exchange without entity authentication. This flaw enables an Adversary in the Middle (AiTM) attack. The vulnerability has a CVSS 3.1 base score of 5.9 (Medium) , i...

CVE-2026-77703 SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

CVE-2026-77703 SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine

Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...

Astra Linux – Vulnerability in OpenSSH

A vulnerability was discovered in OpenSSH when the VerifyHostKeyDNS option is enabled. A man-in-the-middle attack can be carried out by a malicious machine pretending to be a legitimate server. This issue arises due to the way OpenSSH handles error codes under certain conditions during the...

Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)

Vulnerability Central Dogma's Git mirror SSH client installs an Apache MINA SSHD ServerKeyVerifier lambda that returns true unconditionally for every outbound SSH connection used by git+ssh:// mirrors. The accompanying lines disable the knownhosts and /.ssh/config fallbacks, and a repo-wide searc...