FML-Network

FLNET2023: Conjunto de datos realista de detección de intrusiones en redes para aprendizaje federado Paper: FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Dataset: FLNET2023 Introducción FLNET2023 es un conjunto de datos de referencia de última generación para...

pentest-a2p2v-core

README 자동 공격 경로 계획 및 검증 A2P2V은 특정 공격자 목표가 주어졌을 때 사용자가 순위가 매겨진 공격 시퀀스 집합을 결정할 수 있도록 지원하는 계획 및 사이버 공격 도구입니다. 이 도구의 목표는 비보안 전문가도 가능한 한 많은 자동화를 통해 기본 입력으로부터 명확하고 실행 가능한 인텔리전스를 생성하고, 해석하기 쉬운 보고서를 출력할 수 있도록 프로세스를 단순화하는 것입니다. 이 시스템은 알려진 네트워크 토폴로지와 시스템 취약점 정보를 사용하여 공격자 목표를 달성하기 위한 모든 공격 시퀀스 집합을 결정하고, 선택된...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

skydive

Skydive...

network-security-snort

Laboratório de Implantação de IDS/IPS Snort Um ciclo completo de implantação do Snort 3 como Sistema de Detecção de Intrusão monitoramento passivo e como Sistema de Prevenção de Intrusão bloqueio ativo via iptables, validado contra quatro vetores de ataque em uma rede virtual de três máquinas no...

AgentCyTE

CORE TopoGen Genera topologie di rete CORE riproducibili da file XML di scenario utilizzando una ricca GUI Web o un'interfaccia a riga di comando. Indice dei contenuti Punti salienti Schermate Avvio rapido Prerequisiti Installa le dipendenze Avvia la Web UI Esegui la CLI Flusso di lavoro...

Security_incident_report

01. Configurazione dell'infrastruttura L'infrastruttura di questo progetto non è gestita tramite codice IaC come Terraform: è stata configurata installando pfSense e Wazuh e modificando direttamente le impostazioni dalla schermata di amministrazione GUI. Qui quindi non c'è "codice", ma uno schema...

Targeted Quarantine Strategies Mitigate SIS-Model Cyber Epidemics on Complex Networks

The rapid expansion of highly connected and heterogeneous digital infrastructures has fundamentally altered the dynamics of cyber epidemics, making it increasingly important to understand how malware propagates under realistic structural and policy conditions. In this study, we employ an SIS...

CVE-2026-63096

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

EUVD-2026-45194

Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...

CVE-2026-35142

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...

CVE-2026-35142

Technical details about CVE-2026-35142 are not publicly available in the provided documents; no affected versions, root cause, exploit information, or remediation are specified. Monitor for updates.

EUVD-2026-19682

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

CVE-2026-35516

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

PT-2026-30864

LinkAce is a self-hosted archive to collect website links. Prior to 2.5.4, LinkRepository::update and CheckLinksCommand::checkLink do not check for private IPs. An authenticated user can read responses from internal services AWS IMDSv1, cloud metadata, internal APIs by creating a link with a publ...

MAL-2026-2465 Malicious code in strapi-plugin-health-check (npm)

strapi-plugin-health-check is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

MAL-2026-2459 Malicious code in strapi-plugin-debug-tools (npm)

strapi-plugin-debug-tools is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

Malicious code in strapi-plugin-cms-tools (npm)

strapi-plugin-cms-tools is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network...

Malicious code in strapi-plugin-finseven (npm)

strapi-plugin-finseven is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network topolog...

MAL-2026-2471 Malicious code in strapi-plugin-nordica (npm)

strapi-plugin-nordica is a malicious npm package disguised as a Strapi CMS plugin. On install, it runs a postinstall script that executes an 11-phase attack: stealing .env files, environment variables, Strapi configuration, private keys, Redis data, Docker/Kubernetes secrets, and network topology...