567 matches found
CVE-2021-40531
CVE-2021-40531 This proof-of-concept in action. Sketch is a popular UI/UX design app for macOS. This post covers a vulnerability in Sketch that I discovered back in July, CVE-2021-40531. In its simplest form, it is a macOS quarantine bypass, but in context it can be used for remote code execution...
NGWAF
N3XT-G3N Web App Firewall NGWAF NGWAF is created by@yupengfei, @zhangbosen, @matthewng and @elizabethlim. Special shoutout to@ruinahkoh for her contributions to the initial stages of NGWAF. NGWAF is an experimental proof of concept and not ready for production use in its current form. Contents 1...
zero-touch-containment
zero-touch-containment Antigena Darktrace → Aruba ClearPass CoA bridge — model-driven, real-time user/device quarantine. Zero SOC clicks between detection and containment. Sanitized reference implementation of a production NDR↔NAC integration pattern operated at financial-sector scale...
Powershell-Tools
PSUnzipper - PowerShell Unzipper Uses SharpZipLiB in .NET, loaded in runtime no file on disk - ref. https://github.com/icsharpcode/SharpZipLib Can be used with password zip, unzip Both encryption methods AES and ZipCrypto is supported. When zipping/unzipping - no file in temp is created - all...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
linux-malware-detect
Linux Malware Detect LMD Scanner de malware para Linux — detecção de ameaças em múltiplos estágios MD5, SHA-256, HEX, YARA, análise estatística, integração com ClamAV, monitoramento inotify em tempo real, operações de quarentena/limpeza/restauração e alertas em múltiplos canais email, Slack,...
CVE-2021-30657
CVE-2021-30657 Ein einfacher POC für CVE-2021-30657, der macOS betrifft Details zur Schwachstelle Eine Schwachstelle in syspolicyd ermöglicht es speziell präparierten, aus dem Internet heruntergeladenen App-Bundles, grundlegende macOS-Sicherheitsfunktionen wie File Quarantine, Gatekeeper und...
CVE-2024-31771
CVE-2024-31771 TotalAV Scrittura Arbitraria di File TotalAV versione 6.0.x https://github.com/restdone/CVE-2024-31771/assets/42227817/ffe0c2ec-4ea6-4c29-852f-456b2e62f5b1 Cronologia: 13 febbraio 2024: Scoperta la vulnerabilità 6.0.740 e segnalata a TotalAV. 15 febbraio 2024: TotalAV ha confermato...
Blackash-CVE-2025-20393
🛡️ CVE-2025-20393 – Kritische Cisco AsyncOS Schwachstelle 🔍 Überblick CVE‑2025‑20393 ist eine kritische Remotecodeausführung RCE ‑Schwachstelle in Cisco AsyncOS Software , die folgende Geräte betrifft: Cisco Secure Email Gateway physisch & virtuell Cisco Secure Email and Web Manager physisch &...
CVE-2020-24955
CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Escalation dei privilegi locale Le versioni di SUPERAntiSpyware Professional X Trial precedenti alla 10.0.1206 sono vulnerabili a un'escalation dei privilegi locale perché consentono agli utenti non privilegiati di ripristinare file...
CVE-2025-20393
CVE-2025-20393 📌 Überblick CVE-2025-20393 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE , die Cisco Secure Email Gateway SEG - und Cisco Secure Email and Web Manager SEWM -Appliances betrifft, die Cisco AsyncOS ausführen. Die Schwachstelle existiert aufgrund unsachgemäßer...
CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner
CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Scanner Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – Tutti i diritti riservati Autorizzato da CYBERDUDEBIVASH AUTHORITY – Strumento di rilevamento etico per CVE-2025-20393 RCE non autenticata in Cisco Secure Email Gateway / SMA. Questo strumento aiuta ...
CVE-2026-76237
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
CVE-2026-76237
stigmem-node before 0.9.0a12 has a cross-tenant BOLA flaw in quarantine review endpoints: list/count queries and _get_quarantined_fact in routes/quarantine.py lack a tenant_id predicate, and the garden lookup is not tenant-scoped, allowing a low-privilege tenant admin to read, admit, or reject ot...
CVE-2026-76237 stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
EUVD-2026-62477
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
CVE-2026-76237 stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
PT-2026-78418
Name of the Vulnerable Software and Affected Versions stigmem-node versions prior to 0.9.0a12 Description Broken object level authorization BOLA exists in the quarantine review endpoints. In multi-tenant deployments using the stigmem-plugin-multi-tenant plugin, the get quarantined fact function i...
Targeted Quarantine Strategies Mitigate SIS-Model Cyber Epidemics on Complex Networks
The rapid expansion of highly connected and heterogeneous digital infrastructures has fundamentally altered the dynamics of cyber epidemics, making it increasingly important to understand how malware propagates under realistic structural and policy conditions. In this study, we employ an SIS...