SysTrace

SysTrace 2.0 ptrace-based Linux syscall monitor and sandbox for analyzing ELF binaries. SysTrace runs a target inside an isolated Linux namespace environment, traces its system calls and child processes, applies rule-based detection and weighted risk scoring, then uses a Random Forest classifier ...

sentrygrid

SentryGrid ML駆動の脅威検知・継続的モニタリングを備えた、連邦政府のゼロトラスト アーキテクチャ向けに構築されたプラットフォーム。OSCALネイティブ、FedRAMP Moderate準拠、ハッシュチェーン監査、3モデル異常検知アンサンブル。 クイックスタート make setup install bun + python deps make dev-up bring up the local stack via docker compose make dev turbo dev across workspaces make smoke end-to-end smoke te...

CVE-2026-59787

A flaw was found in Zabbix. The Perl Simple Network Management Protocol SNMP trap receiver script does not properly sanitize the record delimiter within incoming trap content. An attacker capable of sending SNMP traps can exploit this vulnerability to inject forged trap records targeting other...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-11710 DESCRIPTION: IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling...

Security Bulletin: Multiple vulnerabilities within WebSphere Application Server Liberty, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within KCCI WebSphere Liberty Server which is included as part of IBM Tivoli Monitoring ITM portal server have been addressed. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: hwmon: axi-fan-control Fixed a possible NULL pointer dereferencing issue. axifancontrolirqhandler, which depends on the private axifancontroldata structure, might be called before the hwmon device is registered. This could lead t...

Astra Linux – Vulnerability in Linux

A flaw related to memory leaks in the Linux kernel’s performance monitoring subsystem was discovered due to the use of PERFEVENTIOCSETFILTER. A local user could exploit this flaw to deplete resources, resulting in a denial of service...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86/pmu: Disabled support for adaptive PEBS. Support for virtualizing adaptive PEBS has been discontinued. This is because KVM’s implementation is architecturally broken without an obvious or easy way to address this issu...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: sysfs: Prevent division by zero This issue prevents division by zero when monitoring is not enabled...

RemotePSpy

RemotePSpy RemotePSpyは、リモートPowerShellセッションのライブ監視を提供します。これは、包括的なログ機能が組み込まれていない古い（5.0より前の）バージョンのPowerShellで特に役立ちます。 これは、リモートPowerShellのトランスポートとして使用されるWinRMプロトコルからメッセージデータを取得するためにWindowsイベントトレーシング（ETW）を使用し、さまざまなプロトコル層をデコードして、実行されたスクリプトコマンドとその入出力のトレースを提供します。...

CVE-2024-25175

CVE-2024-25175 HTTP 응답 분할을 통한 반사형 XSS 설명 : 이 취약점을 악용하면 특수하게 조작된 링크를 따라갈 때 피해자 브라우저에서 JavaScript 코드가 실행될 수 있습니다 Cross-Site Scripting. 취약점은 웹 서버가 줄바꿈 문자\r\n 또는 CR\LF, URL 인코딩에서는 %0d%0a를 올바르게 처리하지 않기 때문에 발생합니다. 영향 : 반사형 XSS CVSSv3.1 vector : AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 6.1 CWE : CWE-20: 부적절한...

ddos-traffic-monitor

DDoS Traffic Monitor 네트워크 트래픽 양을 IP 주소별로 감지하고 표시하여 잠재적인 DDoS 공격 을 식별하는 실시간 트래픽 모니터링 도구 입니다. 이 도구는 Python 2.7 로 제작되었으며, 백엔드로 Flask를, 시각화를 위해 웹 기반 프론트엔드를 사용합니다. 기능 실시간 모니터링 : 네트워크 패킷을 캡처하고 IP 주소별 패킷 수를 표시합니다. 웹 기반 대시보드 : 웹 브라우저를 통해 접근할 수 있는 사용자 친화적인 인터페이스입니다. 대화형 테이블 : 몇 초마다 자동으로 업데이트되어 실시간 트래픽을...

Towards a Unified Misuse Monitoring Benchmark

LLM agents increasingly act in multi-actor environments, exposing them to misuse from multiple sources: decomposition attacks, where a harmful request is split into innocuous sub-requests, and prompt injection attacks, where a compromised tool delivers a malicious instruction. Existing evaluation...

MAL-2026-17515 Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

Malicious code in monitoring-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703c1e796904571c9f0d08a4769a5f7e25a646483b4a66815a6ddc420ae0ecee The package exports an Express middleware monitor advertised as a monitoring tool. On every response finish, the middleware POSTs the inbound HTTP...

external_tcpdump_AOSP10_r33_CVE-2019-15166

tcpdump 보안 문제를 보고하려면 [email protected]로 이메일을 보내주세요. 버그 및 기타 문제 보고, 패치 기여, 기능 요청, 일반적인 피드백 제공 등은 tcpdump 소스 트리 루트의 CONTRIBUTING 파일을 참조하세요. TCPDUMP 4.x.y 현재 "The Tcpdump Group"에서 유지 관리 참조: www.tcpdump.org 익명 Git은 다음을 통해 사용 가능: git clone git://bpf.tcpdump.org/tcpdump 이전에는 Lawrence Berkeley...

SharkTooth

SharkTooth（開発中） SharkToothは、TCPおよびUDPに対応したポートスキャナです。基本的なネットワーク監査とトレーニングに適しています。 「開発中」の意味: 既存の機能がリファクタリングまたは削除される一方で、新しい機能が追加されています。 新機能: SYNスキャン、スニファ 手動パケット組み立て: IP/TCPヘッダーの構築、チェックサムの計算 削除予定の機能: プログレスバー モニタリング（Prometheus + Grafana） !NOTE このスキャナはWindowsでは動作しません -...

external_tcpdump_CVE-2018-14469

tcpdump 보안 문제를 보고하려면 [email protected]로 이메일을 보내주십시오. 버그 및 기타 문제 보고, 패치 기여, 기능 요청, 일반 피드백 등은 tcpdump 소스 트리 루트의 CONTRIBUTING 파일을 참조하십시오. TCPDUMP 4.x.y 현재 "The Tcpdump Group"에 의해 유지 관리됨 참조: www.tcpdump.org 익명 Git 접근은 다음을 통해 가능합니다: git clone git://bpf.tcpdump.org/tcpdump 이전에는 로렌스 버클리 국립연구소 네트워크 ...

zabbix-template-CVE-2020-1472

zabbix-template-CVE-2020-1472 Netlogon 권한 상승 취약점CVE-2020-1472과 관련된 Windows 이벤트 뷰어 이벤트를 모니터링하기 위한 Zabbix 템플릿입니다. 이벤트 ID 5827, 5828 & 5829를 모니터링합니다. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472...

ThreatIntelligenceDiscordBot

脅威インテリジェンス Discordボット vx-underground脅威インテリジェンスDiscordボットは、さまざまなクリアネットドメイン、ランサムウェア脅威アクタードメイン、Telegramチャンネルから更新情報を取得します。このボットは1800秒間隔で更新をチェックします（Telegramボットは除く。これはリアルタイムで取得されます）。 セットアップしたくない？ この脅威インテリジェンスボットは現在Discord上で稼働中です。 Python 3.10 64bitで記述 WindowsまたはLinuxで動作可能 Discord Webhookが必要...