Cybersecurity-Projects — Updated!

Cybersecurity Projects 🐉 70 Cybersecurity Projects, Certification Roadmaps & Resources Made possible by CertGames View Complete Projects: Currently building: DDoS Mitigation Tool Quick Navigation Projects Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations...

Experimental Side Channel Analysis of Protocol Stages in Quantum Identity Authentication

Quantum networks can enable distributed computing and sensing. To realize these capabilities securely, quantum identity authentication is essential. Without authentication at the quantum layer, malicious repeaters may retain entanglement instead of performing swapping, enabling man-in-the-middle...

PT-2026-64837

The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated attackers to terminate the active sessions force-logout of any user on the site, including administrators...

VulnGym: Evaluating Vulnerability Management Strategies against Advanced Persistent Threats

Enterprise networks are continuously targeted by Advanced Persistent Threats APTs, attack campaigns exploiting software vulnerabilities to compromise critical assets over time. As disclosed vulnerabilities grow, resource-constrained organizations must prioritize which ones to patch. Existing...

abva

Autonomous Binary Vulnerability Agent ABVA Educational po...

ADVERSARIAL: And-Inverter Graph-Assisted Hardware Trojan Detection at Scale

Modern System-on-Chip SoCs often contain hundreds of millions to tens of billions of gates, making existing Hardware Trojan HT detection methods impractical due to their immense scale. The proposed approach incorporates symbolically enabled learning by modeling flattened gate-level netlists as...

HTB-Writeups

Hack The Box Writeups This repository contains my Hack The Bo...

TroPUF: Evaluating Hardware Trojan Insertion in Delay-Based Physical Unclonable Functions

Delay-based Physical Unclonable Functions PUFs are commonly used for device authentication and key generation due to the fact that they rely on manufacturing induced delay variations. However, these same variations make PUFs inherently non-deterministic, which can allow malicious logic to blend i...

AIDRS-Hybrid-Intrusion-Detection

AIDRS — AI-Powered Intrusion Detection & Response System A...

CVE-2026-65463

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

CVE-2026-59513

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

EUVD-2026-48075

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

CVE-2026-65463

CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...

EUVD-2026-48186

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

Exploit for CVE-2026-64600

cve-id Donate Support the maintenance of this project wit...

QuantumChain: Blockchain-Backed Quantum Federated Learning for Financial Fraud Detection

Financial fraud detection is challenged by decentralized data, severe class imbalance, and privacy constraints. This paper presents QuantumChain, a secure Quantum Federated Learning QFL framework that combines hybrid quantum-classical neural networks, encrypted federated aggregation,...

From Evaluation to Optimisation: Hierarchy-Aware Training Signals for CWE Prediction in Python

The original ALPHA benchmark introduced a taxonomy-aware penalty for evaluating CWE-level vulnerability prediction in Python and proposed that the penalty could theoretically also serve as a training signal. This paper provides that validation. We compare three delivery mechanisms: supervised...

Incorrect Authorization

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Incorrect Authorization in the Machine Learning management endpoint due to insufficient authorization checks. An attacker can...

Allocation of Resources Without Limits or Throttling

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the machine learning feature. An attacker can cause the server to exhaust...

EUVD-2026-47584

Incorrect Authorization CWE-863 in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management...