AgentCyTE

CORE TopoGen 使用丰富的 Web GUI 或命令行界面，从场景 XML 文件生成可复现的 CORE 网络拓扑。 目录 高亮特性 截图 快速开始 先决条件 安装依赖 启动 Web UI 运行 CLI 完整预览工作流 功能深入解析 规划语义 路由器连接与聚合 流量、分段与服务 报告与产物 架构概述 故障排查 附加文档 贡献 引用 高亮特性 单一来源规划 – 在浏览器或任何 XML 编辑器中编辑场景，并通过 CLI 复现结果。 确定性预览 – 可选的 RNG 种子锁定主机扩展、路由器放置、连接性、服务、分段和漏洞分配。 实时日志坞 –...

ttddbg

ttddbg - 时间旅行调试 IDA 插件 ⚠️ 注意：使用 IDA 8 的用户，在将 ttddbg 与 IDA 8 配合使用时目前需要一种变通方法，请参阅已知问题 此插件为 IDA 添加了一个新的调试器，支持加载使用 WinDBG Preview 生成的时间旅行调试跟踪记录。 此插件支持 x86 和 x64 跟踪记录，并由此支持 IDA 和 IDA64。 安装 可以使用发布页面上的安装程序来安装此插件。只要你已安装 WinDBG Preview，安装程序将自动安装所需的依赖项。 使用方法 安装后，您可以在 IDA 界面中选择 ttddbg 调试器，并将您的 .run...

CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDFプレビュー Exploit PoC このエクスプロイトは、PostScript出力が反映されず、png画像を介したPDFプレビューなどで実行されるGS環境におけるCVE-2019-14811を標的としています。 エクスプロイトはpngXXmプレビューで直接コマンドを描画します。これは https://github.com/hhc0null/GhostRule/blob/master/ghostrule1.ps に基づいています。...

CVE-2019-3396

CVE-2019-3396 Confluence Widget Connector のパストラバーサル CVE-2019-3396 RCE POC POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0 Content-Type:...

defcon_27_windbg_workshop

“使用 WinDbg Preview 进行现代调试” DEFCON 27 工作坊 此仓库包含 DEFCON 27 工作坊 的资料 概述 摘要 现在是 2019 年，然而仍有太多 Windows 开发者和黑客依赖于（有用但相当）老式的工具来调试 Windows 二进制文件（OllyDbg、Immunity Debugger）。他们没有意识到的是，他们错过了微软最新的 WinDbg Preview 版本所带来的宝贵工具和功能。这个动手实践的工作坊将尝试拉平差距，通过实际演示 WinDbg 已经改变到了何种程度——它应当成为任何用于二进制分析的 Windows 10...

CVE-2026-104907

MISP contains a cross-site scripting XSS vulnerability in the remote event preview page. When a linked remote MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was HTML-escaped but not sanitized for the JavaScript...

CVE-2026-104900

MISP contains a stored cross-site scripting XSS vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with the ability to create or modify events on a linked...

CVE-2026-104907 MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

MISP contains a cross-site scripting XSS vulnerability in the remote event preview page. When a linked remote MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was HTML-escaped but not sanitized for the JavaScript...

CVE-2026-104907 MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

MISP contains a cross-site scripting XSS vulnerability in the remote event preview page. When a linked remote MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was HTML-escaped but not sanitized for the JavaScript...

EUVD-2026-91743

MISP contains a cross-site scripting XSS vulnerability in the remote event preview page. When a linked remote MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was HTML-escaped but not sanitized for the JavaScript...

CVE-2026-104907 MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

MISP contains a cross-site scripting XSS vulnerability in the remote event preview page. When a linked remote MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was HTML-escaped but not sanitized for the JavaScript...

CVE-2026-104907

MISP is vulnerable to a cross-site scripting (XSS) flaw in the remote event preview page. The issue arises because tag identifiers are rendered within an inline JavaScript onclick attribute; while these values are HTML-escaped, they are not properly sanitized for a JavaScript string context. A ma...

CVE-2026-104900 MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

MISP contains a stored cross-site scripting XSS vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with the ability to create or modify events on a linked...

CVE-2026-104900 MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

MISP contains a stored cross-site scripting XSS vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with the ability to create or modify events on a linked...

EUVD-2026-91669

MISP contains a stored cross-site scripting XSS vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with the ability to create or modify events on a linked...

CVE-2026-104900

MISP is affected by a stored cross-site scripting (XSS) vulnerability in the remote event preview index table rendering. The issue stems from the count field template failing to apply HTML encoding to the field value, even though it escapes the associated link URL. An attacker capable of creating...

CVE-2026-104900 MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

MISP contains a stored cross-site scripting XSS vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with the ability to create or modify events on a linked...

AZL-106041 CVE-2026-63772 affecting package kata-containers-preview 3.27.0~preview2-2

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-106023 CVE-2026-66055 affecting package kata-containers-preview 3.27.0~preview2-2

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-104471

YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CSV import preview. Attackers can import a CSV whose file or image field references a remote .php URL, which is saved...