axiom

警告 : Axiom Classic は現在メンテナンスモードです。新しい Ax Framework への移行をお勧めします。今後数ヶ月のうちに、2025年より前に Axiom Classic に必要な品質改善アップデートを導入します。Axiom 万歳！ Axiom は動的インフラストラクチャフレームワーク であり、マルチクラウド環境で効率的に作業し、攻撃的・防御的セキュリティに焦点を当てた反復可能なインフラストラクチャを構築・展開するためのものです。 Axiom...

yara

!IMPORTANT このプロジェクトはメンテナンスモードです。詳細：https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARAの概要 YARAは、（必ずしも限定ではありませんが）マルウェア研究者がマルウェアサンプルを識別・分類するための支援を目的としたツールです。YARAを使うと、テキストパターンやバイナリパターンに基づいて、マルウェアファミリー（あるいは記述したい任意のもの）の説明を作成できます。各説明（ルールと呼びます）は、一連の文字列とその論理を決定するブール式から構成されます。例を見てみましょう： rule...

turbinia

Turbinia 概要 注意: Turbinia は新機能の開発を終了し、メンテナンスモードに入っています。ユーザーはOpenRelik をご覧ください。 Turbinia は、分散フォレンジックワークロードをデプロイ、管理、実行するためのオープンソースフレームワークです。一般的なフォレンジック処理ツール（Plaso、TSK、strings など）の実行を自動化し、クラウドでの証拠処理、大量の証拠の処理のスケーリング、可能な限りの並列処理による応答時間の短縮を支援することを目的としています。 動作の仕組み Turbinia...

aws__aws-sdk-java_CVE-2022-31159_1-12-2600

AWS SDK for Java AWS SDK for Java を使用すると、Java 開発者は Amazon Web Services を簡単に操作でき、Amazon S3、Amazon DynamoDB、Amazon Glacier などで拡張性の高いソリューションを構築できます。 開始方法については AWS SDK for Java 2.x を参照してください。 2024年7月31日時点でメンテナンスモード AWS SDK for Java 1.x はメンテナンスモードです。AWS SDK for Java 1.x...

WordPress CMP – Coming Soon & Maintenance plugin < 4.1.20 - Unauthenticated Maintenance Mode Bypass vulnerability

Unauthenticated Maintenance Mode Bypass vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin CMP – Coming Soon & Maintenance versions 4.1.20...

CVE-2026-13413 CMP - Coming Soon & Maintenance < 4.1.20 - Unauthenticated Maintenance Mode Bypass via Login URL Match

The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while maintenance/coming-soon mode is enabled, allowing unauthenticated visitors to bypass the coming-soon page and reach the otherwise hidden site, including hidden published pages, ...

security_monkey

참고: Security Monkey는 유지보수 모드이며 2020년에 지원이 종료됩니다. AWS 사용자는 AWS Config를 이용해 주시기 바랍니다. GCP 사용자는 Cloud Asset Inventory를 이용해 주시기 바랍니다. Security Monkey Security Monkey는 AWS 및 GCP 계정에서 정책 변경을 모니터링하고 안전하지 않은 구성이 발견되면 경고를 보냅니다. OpenStack 퍼블릭 및 프라이빗 클라우드도 지원합니다. Security Monkey는 GitHub 조직, 팀, 리포지토리까지 감시하고...

RedEye

RedEye : 레드팀 C2 로그 시각화 ⚠️ 이 저장소는 현재 유지보수 모드입니다 ⚠️ 이 GitHub 저장소는 더 이상 활발히 개발되지 않습니다. 버그 수정을 위해 커뮤니티 이슈 및 풀 리퀘스트를 검토하겠지만, 새로운 기능 추가는 고려하지 않습니다. RedEye는 CISA와 DOE의 Pacific Northwest National Laboratory가 개발한 오픈소스 분석 도구로, 레드팀이 명령 및 제어 활동을 시각화하고 보고하는 것을 돕습니다. 이 도구를 통해 운영자는 복잡한 데이터를 평가하고 표시하며, 완화 전략을...

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ PLEASE NOTE: Cuckoo Sandbox 2.x is currently unmaintained. Any open issues or pull requests will most likely not be processed, as a current full rewrite of Cuckoo is...

dependency-track v4.14.4

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials SBO...

Astra Linux – Vulnerability in Zabbix

Zabbix Frontend offers a feature that enables administrators to manage the installation and ensure that only certain IP addresses can access it. This way, no user will be able to access the Zabbix Frontend during maintenance, and sensitive data will be protected from being disclosed. An attacker...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

Reyrolle 7SR5 (all versions

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

EUVD-2026-72668

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

PT-2026-87012

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-62654: Download of Code Without Integrity Check

A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server without verifying its authenticity or integrity. This...

CVE-2026-84186 Incorrect access control in PrestaShop

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...

CVE-2026-84186 Incorrect access control in PrestaShop

Vulnerability involving incorrect access control in the Tools::getRemoteAddr function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy, load balancer or CDN. The application incorrectly processe...