TTPRunner

TTPRunner Автономный агент для выполнения TTP в операциях фиолетовой команды Передайте ему отчет об угрозе. Он строит план атаки. Вы утверждаете. Он выполняет. Возможности Возможность| Описание ---|--- Многоформатный парсинг| PDF на основе LLM, STIX 2.1, Markdown, URL — вставьте отчет об угрозе и...

distributed-system-testing

분산 시스템 테스트 스킬 분산 및 상태 저장 시스템을 대상으로 클레임 기반 테스트를 설계·실행하는 AI 코딩 에이전트용 두 가지 스킬. 두 스킬은 함께 10가지 상태 판정과 명시적인 SUT / 하니스 / 체커 / 환경 책임 분류가 포함된 구조화된 Markdown 테스트 계획과 발견 보고서를 생성한다. 리뷰어는 두 산출물을 읽고 출시 여부를 결정한다. 그 외에 다시 실행할 것은 없다. Claude Code, Codex, Copilot CLI, Cursor, Gemini 또는 Markdown을 읽고 셸을 실행하는 모든 에이전트에서...

90DaysOfCyberSecurity

90일 사이버보안 학습 계획 📚 목차 소개 목표 및 대상 독자 일일 학습 계획 1-7일차: Network+ 개념 8-14일차: Security+ 개념 15-28일차: Linux 튜토리얼 29-42일차: Python 43-56일차: 트래픽 분석 57-63일차: Git 64-70일차: ELK 71-77일차: GCP 또는 AWS 또는 Azure 85-90일차: 해킹 91-92일차: 한 페이지 이력서 93-95일차: 지원처 및 지원 방법 기여 📘 소개 90일 사이버보안 챌린지 에 오신 것을 환영합니다! 이 저장소는 학습자가 사이버보안...

security-study-plan

Практический план обучения для того, чтобы стать успешным инженером по кибербезопасности, в зависимости от ролей, таких как пентест, AppSec, облачная безопасность, DevSecOps и других. Включает бесплатные/платные ресурсы, инструменты и концепции для достижения успеха. Охватывает, но не...

Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

Spray365

Что такое Spray365? Spray365 — это инструмент для перебора паролей, который определяет действительные учетные данные для учетных записей Microsoft Office 365 / Azure AD. Чем Spray365 отличается от множества других доступных инструментов для перебора паролей? Spray365 позволяет выполнять перебор...

CVE-2020-12629

제목: osTicket 1.14.1 - 지속적인 인증된 크로스 사이트 스크립팅 작성자: Mehmet Kelepce / Gais Cyber Security 날짜 : 2020-03-24 소스 링크: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE: https://vulners.com/cve/CVE-2020-12629 Exploit-Db : https://www.exploit-db.com/exploits/48413 공급업체...

PT-2026-99287

Name of the Vulnerable Software and Affected Versions capgo.app affected versions not specified Description An issue exists in the row-level security UPDATE policy on the public.orgs table. An authenticated organization administrator with org.update settings permissions can bypass the official...

CVE-2026-88848

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

CVE-2026-88848 MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

CVE-2026-88848

The MasterStudy LMS WordPress plugin (versions 1.9 to

CVE-2026-88848 MasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

CVE-2026-88848: Incorrect Authorization

The MasterStudy LMS WordPress plugin from 1.9 before 3.7.50 does not verify that a course a member asks to enrol in is covered by their membership plan, nor that the plan identifier submitted with the request is one they actually hold, allowing any member to enrol themselves into restricted paid...

PT-2026-98419

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress plugin versions 1.9 through 3.7.49 Description Insufficient verification occurs when a member requests enrollment in a course. The plugin fails to confirm if the requested course is included in the user's membership...

CVE-2026-76863

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod_qos_bandwidth plan.json handling, specifically within filter_conns_dump_cgi.c and IGD_CgiCall.c. Authenticated users with broad roles can access QoS read routes to obtain live network telemetry...

CVE-2026-76863 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

CVE-2026-76863 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the modqosbandwidth plan.json handling within filterconnsdumpcgi.c and IGDCgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond their...

PT-2026-93197

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod qos bandwidth plan.json handling within filter conns dump cgi.c and IGD CgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond...

CVE-2026-86406

The User Registration & Membership WordPress plugin before 5.2.8 does not check the capability of the user making a membership purchase, and does not validate the payment method or the plan submitted with it, allowing any authenticated user such as a subscriber to be granted the WordPress role...