9174 matches found
cve-scores
CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...
nmap-vulners
nmap-vulners nmap 서비스 스캔을 실제 공격 대상이 되는 CVE 및 익스플로잇의 순위 목록으로 변환합니다. nmap이 이미 식별한 소프트웨어를 가져와 Vulners 데이터베이스에 해당 소프트웨어에 대해 알려진 내용을 질의하고, 그 답변을 스캔 보고서 안에 출력하는 하나의 NSE 스크립트입니다. 실제로 익스플로잇 가능한 항목을 기준으로 가장 심각한 것부터 나열합니다. 스캔용으로 공개된 호스트에 대한 실제 스캔입니다. 키 없음, 그다음 키 있음, 그다음 웹 포트: nmap의 -sV가 Coyote 배너를 보고하고 스윕이...
misp-dashboard
misp-dashboard 하나 이상의 MISP 인스턴스의 ZMQ 피드에서 실시간 데이터와 통계를 보여주는 대시보드입니다. 이 대시보드는 위협 인텔리전스 정보를 수집하기 위한 실시간 상황 인식 도구로 사용할 수 있습니다. misp-dashboard에는 각 조직의 기여도와 시간에 따른 순위를 보여주는 게이미피케이션 도구가 포함되어 있습니다. 이 대시보드는 SOC보안 운영 센터, 보안 팀 또는 사이버 훈련 중에 여러 MISP 인스턴스에서 처리되는 내용을 추적하는 데 사용할 수 있습니다. 기능 실시간 대시보드 여러 MISP 인스턴스...
raink
ドキュメントのランキングにLLMを使用します。 説明 AIには、問題を完全に定義せずに「問題を投げる」だけで何らかの結果を得られるという力があります。例えば、コード差分を大量に与えてセキュリティアドバイザリを添え、「これらの差分のうち、どれがセキュリティバグを修正する可能性が最も高そうですか？」と尋ねることができます。しかし、常にそれほど簡単なわけではありません。 非決定性：常に同じ結果を返すとは限らない コンテキストウィンドウ：すべてのデータを一度に渡すことはできず、分割する必要がある 出力の制約：レビューを依頼したデータをすべて返さないことがある...
stringsifter
StringSifterは、マルウェア解析における関連性に基づいて文字列を自動的にランク付けする機械学習ツールです。 クイックリンク 技術ブログ記事 - より高速なマルウェア解析のための文字列出力のランク学習 発表ブログ記事 - StringSifterのオープンソース化 DerbyCon トーク - StringSifter: より高速なマルウェア解析のための文字列出力のランク学習 PyPi での StringSifter リリース 使用方法 StringSifter は Python バージョン 3.9...
TempQ-Jail: Query-Constrained Candidate Ranking for Text-To-Video Jailbreak Attacks
Existing text-to-video T2V jailbreak methods mainly seek more effective or stealthier attack candidates. In guarded T2V systems, however, video generation and security evaluation are costly, so an attacker often cannot test a large candidate pool. We therefore formulate T2V jailbreak as a...
CVE-2026-77520
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...
CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...
CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...
CVE-2026-77520
MaxKB (open-source enterprise AI assistant) in versions 2.10.2-lts and earlier has an authorization flaw in the homepage application question-ranking endpoint. A normal user in the same workspace can extract another user's application_id when the victim's published application has ranking activit...
CVE-2026-77520 MaxKB: Homepage ranking leaks application IDs that workflow application-nodes can use to invoke another user's application
MaxKB is an open-source AI assistant for enterprise. In 2.10.2-lts and earlier, a normal user in the same workspace can obtain another user's applicationid from the homepage application question-ranking endpoint when the published victim application has ranking activity in the selected date range...
PT-2026-96256
Name of the Vulnerable Software and Affected Versions MaxKB versions prior to 2.10.2-lts Description A normal user within the same workspace can obtain another user's application id via the homepage application question-ranking endpoint. This occurs if the victim's published application has ranki...
tawasolpay-risk-assistant
TawasolPay — AI-Powered Cyber Risk Assistant Takes TawasolPay...
GHSA-WR5R-WQP2-X4FH ApostropheCMS: Missing destination-parent authorization in page `move()` allows a low-privileged editor to move and re-rank pages inside a restricted subtree
Summary ApostropheCMS enforces per-type authorization on pages: a page type may declare editRole / publishRole and the core @apostrophecms/archive-page does, so a project can have page-type subtrees that only higher-privileged roles are allowed to create or edit within. The move operation is...
CVE-2026-79668
Ech0 versions before 4.7.3 contain an authentication bypass in the PUT /api/echo/like/:id endpoint. The endpoint lacks both identity verification and rate limiting, allowing unauthenticated attackers to repeatedly increment the fav_count field for any known echo identifier. This can arbitrarily i...
Drug Sites Hijacked Spotify’s Search Ranking Through Fake Podcasts
A joint congressional report describes a spam operation that turned tens of thousands of fake podcasts into search-engine bait for illegal pharmacy and scam sites...
CyBOKClaw: Human-In-The-Loop CyBOK Mapping for Cybersecurity Curriculum
This paper presents CyBOKClaw, an interpretable human-in-the-loop retrieval framework for mapping cybersecurity keywords or phrases KWoPs to the Cyber Security Body of Knowledge CyBOK. Rather than treating the task as strict exact classification, the framework is designed as a top-k candidate...
eip-mcp
Exploit Intel Platform MCP Server Package/command: eip-mcp...
Flawfinder 2.0.20
Flawfinder searches through source code for potential security flaws, listing potential security flaws sorted by risk, with the most potentially dangerous flaws shown first. This risk level depends not only on the function, but on the values of the parameters of the function...