skydive

Skydive Skydive هو محلل مفتوح المصدر لطوبولوجيا الشبكات والبروتوكولات في الوقت الفعلي. يهدف إلى توفير طريقة شاملة لفهم ما يحدث في البنية التحتية للشبكة. تجمع وكلاء Skydive معلومات الطوبولوجيا والتدفقات ويقومون بإعادة توجيهها إلى وكيل مركزي لمزيد من التحليل. يتم تخزين جميع المعلومات في قاعدة بيانا...

FML-Network

FLNET2023 : Ensemble de données réaliste de détection d'intrusions réseau pour l'apprentissage fédéré Article : FLNET2023 : Ensemble de données réaliste de détection d'intrusions réseau pour l'apprentissage fédéré Ensemble de données : FLNET2023 Introduction FLNET2023 est un ensemble de données d...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

pentest-a2p2v-core

اقرأني أداة التخطيط الآلي لمسارات الهجوم والتحقق A2P2V هي أداة تخطيط وهجوم إلكتروني توفر للمستخدمين القدرة على تحديد مجموعة من تسلسلات الهجوم المرتبة بناءً على هدف محدد للمهاجم. تهدف الأداة إلى تبسيط العملية بحيث يمكن لغير خبراء الأمن توليد معلومات استخباراتية واضحة وقابلة للتنفيذ من مدخلات أساسي...

network-security-snort

Laboratoire de déploiement Snort IDS/IPS Un déploiement complet de Snort 3 à la fois en tant que système de détection d’intrusion monitoring passif et système de prévention d’intrusion blocage actif via iptables, validé contre quatre vecteurs d’attaque au sein d’un réseau virtuel de trois machine...

AgentCyTE

CORE TopoGen Générez des topologies réseau CORE reproductibles à partir de fichiers XML de scénario en utilisant une interface Web riche ou une interface en ligne de commande. Table des matières Points forts Captures d'écran Démarrage rapide Prérequis Installer les dépendances Lancer l'interface...

Security_incident_report

01. Configuration de l'infrastructure L'infrastructure de ce projet n'est pas gérée par du code IaC Terraform, etc. : elle a été configurée en installant pfSense·Wazuh puis en modifiant directement les réglages depuis l'interface d'administration GUI. C'est pourquoi vous trouverez ici, non pas du...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

LightLLM through 1.2.0 fails to validate imageurl and audiourl parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error...

CVE-2026-56597

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

CVE-2026-56597 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

EUVD-2026-82783

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

CVE-2026-56597

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability that allows an unauthenticated attacker to extract internal IP addresses from the application's responses. This enables the attacker to map the underlying network topology and identify potential internal ta...

CVE-2026-56597: Exposure of Sensitive Information to an Unauthorized Actor

HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addresses from the application's responses, enabling them to map the underlying network topology and identify potential internal targets...

CVE-2026-92960: Exposure of Sensitive Information to an Unauthorized Actor

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: '' configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers to hijack the host process DNS resolver globally, redirecting all subsequent host DN...

CVE-2026-86122 Rowboat through 0.9.1 Server-Side Request Forgery via Custom MCP Server

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network...

CVE-2026-86122: Server-Side Request Forgery (SSRF)

Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure arbitrary destinations. Attackers can point these URLs at internal services and cloud metadata endpoints to perform server-side request forgery and enumerate internal network...

CVE-2026-51620

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51620: Improper Access Control

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51620

The TOTOLINK T6 router, specifically on firmware version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control issue in the getNetInfoCfg function. This flaw allows unauthenticated attackers to obtain sensitive network topology and interface configuration information by sending a c...