Malicious code in shadowmd (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

flash-exploit-defense-system

flash-exploit-defense-system Adobe Flash CVEエクスプロイト（CVE-2012-0754、CVE-2015-xxxx、CVE-2016-xxxx、CVE-2018-xxxx）に対する、ブラウザ、モバイル、サーバー、およびシステムレベルの保護を備えた包括的な多層防御システム...

lldp

lldp IEEE 802.1AB（LLDP）を介したピアツーピア通信用の Mythic C2 プロファイル。C2 データは、設定可能な OUI を持つ Organizationally Specific TLV（タイプ 127）内に格納され、フレームがネットワーク上でベンダー固有の LLDP 拡張に紛れるようにします。 LLDP はレイヤー 2 のみです。両方のエージェントが同じブロードキャストドメインを共有している必要があります。egress エージェント（HTTP/HTTPX）は、SMB および TCP P2P プロファイルと同様に、LLDP でリンクされたエージェントを Myth...

CVE-2025-44136

CVE-2025-44136 MapTiler Tileserver-php v2.0における認証不要のXSS 説明 MapTiler Tileserver-php v2.0はクロスサイトスクリプティング（XSS）に対して脆弱です。GETパラメータ「layer」がHTMLエンコードされずにエラーメッセージに反映されます。これによりXSSが発生し、認証されていない攻撃者が被害者のブラウザ上で任意のHTMLまたはJavaScriptコードを実行できるようになります。...

CVE-2021-31630-OpenPLC-3-Authenticated-RCE

CVE-2021-31630 OpenPLC 3 WebServer の認証済みリモートコード実行。 説明 Open PLC Webserver v3 におけるコマンドインジェクションの存在により、リモート攻撃者はアプリケーションの「/hardware」ページにある「Hardware Layer Code Box」コンポーネントを悪用して任意のコードを実行できます。 hackthebox の Wifinetictwo.htb マシンでのみテスト済みです。 使用方法 usage: openplcexploit.py -h --usage --ip ADDR --port PORT...

DEBIAN-CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

EUVD-2026-92003

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2026-71885

In Bouncy Castle for Java versions before 1.86 , the Messaging Layer Security (MLS, RFC 9420) implementation failed to bind an X.509 credential to a LeafNode's signature_key . Because the X.509 certificate chain was stored but never parsed or validated, the end-entity certificate's public key was...

CVE-2026-71885 MLS X.509 credential not bound to the LeafNode signature key

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2026-71885

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

CVE-2022-23884

CVE-2022-23884 Minecraft: Bedrock Edition（別名Bedrock Server）の公式サーバーにはネットワーク層の脆弱性が存在し、攻撃者がDoS攻撃を仕掛けることを可能にします。 CVE-2022-23884 は、Mojang Bedrock Dedicated Server 1.16.0-1.18.12 に影響を与えます。これは、PurchaseReceiptPacket::read（パケットデシリアライザー）によって引き起こされる大きなループとサーバークラッシュです。 詳細 CVE-2022-23884 は Bedrock Server...

CVE-2026-71885: Improper Certificate Validation

In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey. LeafNode.verify checked a leaf's signature against the signaturekey carried in the leaf itself, while the credential's X.509 certificate...

Linux Distros Unpatched Vulnerability : CVE-2026-71885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the Messaging Layer Security MLS, RFC 9420 implementation did not bind an X.509 credential to a LeafNode's signaturekey...

CVE-2026-17507

A flaw was found in Bouncy Castle's Messaging Layer Security MLS implementation. Due to an improper signed integer comparison, an out-of-range leaf identifier incorrectly bypasses group membership checks. A group member can exploit this flaw by sending a specially crafted message, causing unbound...

Check Risk WAF

Check Risk WAF 러시아의 종합 클라우드 WAF 솔루션으로 웹 애플리케이션 및 인프라 보호 Russian integrated cloud WAF solution for web application and infrastructure protection 웹사이트 · 문서 · 러시아어 · 영어 러시아어 버전 Check Risk WAF – 러시아의 종합 클라우드 WAFWeb Application Firewall 솔루션으로, L3, L4, L7 계층에서 작동하여 애플리케이션을 공격 , 취약점 , 봇넷 네트워크 , DOS/DDOS...

pocs_slides

IoT / プロトコルセキュリティに関するアドバイザリ、PoC、スライド、スクリプトを共有しています。連絡先は以下のとおりです: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 スライド OffByOne2025: パッチ差分解析、汝は我が剣! FortiGate の 2 つの重大な N-day 脆弱性を深く掘り下げる ビデオ BHEU2023: 理論的限界を打ち破る:...

BlockChainConstruction

はじめに この記事では、主に注目に値するパブリックチェーン監査のいくつかの側面を紹介します。セキュリティ監査者とパブリックチェーン開発者にとって、これは参考と考察に値するプロジェクトです。 アーキテクチャ パブリックチェーンシステムの構築を紹介する前に、ブロックチェーンのアーキテクチャを見てみましょう。 ブロックチェーン1.0時代： アーキテクチャ：下図のとおり 代表的な製品：bitcoin、reborn coin、dogcoin、Leyte coin、MasterCard coinなど ブロックチェーン2.0時代： アーキテクチャ：下図のとおり...

overload

오버로드 인가된 보안 테스트를 위한 Layer 2, Layer 4, Layer 7 공격 방법을 갖춘 Python 기반 네트워크 부하 테스트 도구입니다. !WARNING 이 프로젝트는 보관 처리되었으며 더 이상 적극적으로 유지 관리되지 않습니다. 소스 코드는 계속 사용 가능하지만, 새로운 기능, 버그 수정 또는 업데이트는 계획되어 있지 않습니다. 이 프로젝트는 더 이상 개발 배후의 현재 목표와 관심사를 반영하지 않으므로 향후 개발은 중단되었습니다. 기능 Layer 7 공격: HTTP, HTTP 프록시, Slowloris,...

shadowd

로고 Shadow Daemon 은 애플리케이션 수준에서 요청을 가로채는 웹 애플리케이션 방화벽 입니다. 이 저장소는 요청의 분석과 저장을 처리하는 Shadow Daemon의 주요 구성 요소를 포함합니다. 문서 전체 문서는 shadowd.zecure.org를 참조하세요. 설치 준비 cmake를 사용하여 프로젝트를 구성하고 준비합니다. 이를 위해 별도의 디렉토리를 만드는 것이 좋습니다. 일반적인 설치 과정은 다음과 같습니다. mkdir build cd build cmake -DCMAKEINSTALLPREFIX:PATH=/usr...