567 matches found
NGWAF
Cortafuegos de Aplicaciones Web de Nueva Generación NGWAF NGWAF es creado por@yupengfei, @zhangbosen, @matthewng y @elizabethlim. Un agradecimiento especial a@ruinahkoh por sus contribuciones en las etapas iniciales de NGWAF. NGWAF es una prueba de concepto experimental y no está listo para su us...
CVE-2024-31771
CVE-2024-31771 TotalAV Arbitrary File Write TotalAV version 6.0.x https://github.com/restdone/CVE-2024-31771/assets/42227817/ffe0c2ec-4ea6-4c29-852f-456b2e62f5b1 Timeline: 13th Feb, 2024 : Discovered 6.0.740 vulnerable and reported to TotalAV. 15th Feb, 2024: TotalAV confirmed and reproduced the...
CVE-2021-30657
CVE-2021-30657 A simple POC for CVE-2021-30657 affecting MacOS Vulnerability detail A vulnerability in syspolicyd allows specially crafted application bundle downloaded from internet to bypass foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization. Armed with...
CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner
Escáner CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Copyright © 2026 CYBERDUDEBIVASH ECOSYSTEM – Todos los derechos reservados Autorizado bajo la autoridad de CYBERDUDEBIVASH – Herramienta de detección ética para CVE-2025-20393 RCE no autenticada en Cisco Secure Email Gateway / SMA. Esta...
CVE-2020-24955
CVE-2020-24955 SUPERAntiSpyware Professional X Trial = 10.0.1206 Local Privilege Escalation SUPERAntiSpyware Professional X Trial versions prior to 10.0.1206 are vulnerable to local privilege escalation because it allows unprivileged users to restore quarantined files to a privileged location...
CVE-2021-40531
CVE-2021-40531 This proof-of-concept in action. Sketch is a popular UI/UX design app for macOS. This post covers a vulnerability in Sketch that I discovered back in July, CVE-2021-40531. In its simplest form, it is a macOS quarantine bypass, but in context it can be used for remote code execution...
Blackash-CVE-2025-20393
🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...
zero-touch-containment
zero-touch-containment Puente Antigena Darktrace → Aruba ClearPass CoA — cuarentena de usuario/dispositivo en tiempo real basada en modelos. Cero clics del SOC entre detección y contención. Implementación de referencia sanitizada de un patrón de integración NDR↔NAC operado a escala del sector...
Powershell-Tools
PSUnzipper - PowerShell Unzipper Uses SharpZipLiB in .NET, loaded in runtime no file on disk - ref. https://github.com/icsharpcode/SharpZipLib Can be used with password zip, unzip Both encryption methods AES and ZipCrypto is supported. When zipping/unzipping - no file in temp is created - all...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
linux-malware-detect
Linux Malware Detect LMD Scanner de malware para Linux — detecção de ameaças em múltiplos estágios MD5, SHA-256, HEX, YARA, análise estatística, integração com ClamAV, monitoramento inotify em tempo real, operações de quarentena/limpeza/restauração e alertas em múltiplos canais email, Slack,...
CVE-2025-20393
CVE-2025-20393 📌 Überblick CVE-2025-20393 ist eine kritische Schwachstelle zur Remote-Codeausführung RCE , die Cisco Secure Email Gateway SEG - und Cisco Secure Email and Web Manager SEWM -Appliances betrifft, die Cisco AsyncOS ausführen. Die Schwachstelle existiert aufgrund unsachgemäßer...
CVE-2026-76237
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
CVE-2026-76237
stigmem-node before 0.9.0a12 has a cross-tenant BOLA flaw in quarantine review endpoints: list/count queries and _get_quarantined_fact in routes/quarantine.py lack a tenant_id predicate, and the garden lookup is not tenant-scoped, allowing a low-privilege tenant admin to read, admit, or reject ot...
CVE-2026-76237 stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
EUVD-2026-62477
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
CVE-2026-76237 stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
stigmem-node before 0.9.0a12 contains a broken object level authorization cross-tenant BOLA vulnerability in the quarantine review endpoints. On multi-tenant deployments running the opt-in stigmem-plugin-multi-tenant, the list/count queries and getquarantinedfact in routes/quarantine.py lacked a...
PT-2026-78418
Name of the Vulnerable Software and Affected Versions stigmem-node versions prior to 0.9.0a12 Description Broken object level authorization BOLA exists in the quarantine review endpoints. In multi-tenant deployments using the stigmem-plugin-multi-tenant plugin, the get quarantined fact function i...
Targeted Quarantine Strategies Mitigate SIS-Model Cyber Epidemics on Complex Networks
The rapid expansion of highly connected and heterogeneous digital infrastructures has fundamentally altered the dynamics of cyber epidemics, making it increasingly important to understand how malware propagates under realistic structural and policy conditions. In this study, we employ an SIS...