axiom

警告 : Axiom Classic 现已进入维护模式。我们鼓励您迁移到新的 Ax Framework。在接下来的几个月里，我们将在 2025 年之前为 Axiom Classic 引入必要的质量改进更新。Axiom 万岁！ Axiom 是一个动态基础设施框架 ，用于高效处理多云环境，构建和部署专注于进攻和防御安全的可重复基础设施。 Axiom 的工作原理是将您选择的工具预安装到“基础映像”上，然后使用该映像部署新实例。之后，您可以连接并立即访问许多对漏洞猎人和渗透测试人员有用的工具。借助不可变基础设施的强大功能，大部分工作已为您完成，您可以快速启动 15 个实例，执行分布式的...

yara

!IMPORTANT 此项目处于维护模式。更多信息：https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA 简介 YARA 是一款旨在（但不限于）帮助恶意软件研究人员识别和分类恶意软件样本的工具。使用 YARA，你可以基于文本或二进制模式创建对恶意软件家族（或任何你想描述的事物）的描述。每个描述，即所谓的规则，由一组字符串和一个决定其逻辑的布尔表达式组成。让我们看一个例子： root@kitploit: rule silentbanker : banker meta: description = "This is...

turbinia

Turbinia Resumen Nota: Turbinia ya no desarrollará nuevas funcionalidades y se encuentra en modo de mantenimiento. Los usuarios deberían echar un vistazo aOpenRelik. Turbinia es un framework de código abierto para desplegar, gestionar y ejecutar cargas de trabajo forenses distribuidas. Su objetiv...

security_monkey

ПРИМЕЧАНИЕ: Security Monkey находится в режиме поддержки и будет прекращён в 2020 году. Для пользователей AWS используйте AWS Config. Для пользователей GCP используйте Cloud Asset Inventory. Security Monkey Security Monkey отслеживает ваши учётные записи AWS и GCP на предмет изменений политик и...

RedEye

RedEye : Red Team C2 Log Visualization ⚠️ This Repo Currently in Maintenance Mode ⚠️ This GitHub repository is no longer under active development. We'll review community issues and pull requests for bug fixes, but won't consider any new feature additions. RedEye is an open-source analytic tool...

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...

Astra Linux – Vulnerability in Zabbix

Zabbix Frontend offers a feature that enables administrators to manage the installation and ensure that only certain IP addresses can access it. This way, no user will be able to access the Zabbix Frontend during maintenance, and sensitive data will be protected from being disclosed. An attacker...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK para Java El AWS SDK para Java permite a los desarrolladores de Java trabajar fácilmente con Amazon Web Services y crear soluciones escalables con Amazon S3, Amazon DynamoDB, Amazon Glacier y más. Consulta el AWS SDK para Java 2.x para saber cómo empezar. En modo de mantenimiento a partir...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

Reyrolle 7SR5 (all versions

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

EUVD-2026-72668

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-13414

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

WordPress CMP plugin < 4.1.18 - Unauthenticated Maintenance Mode Disable vulnerability

Unauthenticated Maintenance Mode Disable vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin CMP – Coming Soon & Maintenance versions 4.1.18...

CVE-2026-13414

CVE-2026-13414 affects the CMP – Coming Soon & Maintenance WordPress plugin in versions before 4.1.18 . The vulnerability is an unauthenticated maintenance mode disable via the cmp_disable_comingsoon_ajax AJAX action. The plugin does not perform authorization checks on this action and relies on a...

CVE-2026-13414 CMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajax

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

EUVD-2026-66867

The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a nonce that is skipped for certain and exposed to anonymous visitors on others, allowing unauthenticated attackers to disable the site's maintenance/coming-soon mode under a...

CVE-2026-75919

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...

CVE-2026-75919 phpMyFAQ before 4.1.7 Authentication Bypass via Setup API

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...

CVE-2026-75919 phpMyFAQ before 4.1.7 Authentication Bypass via Setup API

phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that allows unauthenticated attackers to run database migrations and create configuration backups when maintenance mode is enabled. Attackers can call POST /api/setup/update-database and POST /api/setup/backu...