CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ OpenSSH...

HybridTestFramework

HybridTestFramework Supported By In the era of cloud-native world we cannot stick to a particular framework, however due to projects requirement we often need to evolve the existing testing solution in such a way so that it can cater multiple testing requirement, hence HybridTestFramework is...

V8Harvest

V8Harvest V8Harvest ayuda a ver patrones recientes de errores de V8 en una sola página para analizar vulnerabilidades de V8. Ha analizado todos los archivos regress- del directorio src/v8/test/mjsunit/ usando git log. Cada regress contiene los siguientes enlaces relacionados con su propia...

Agent-Security-Regression-Harness

OWASP 智能体安全回归测试框架 OWASP 智能体安全回归测试框架是一个开源、厂商中立的测试框架，用于针对智能体应用和集成 MCP 的系统运行可执行的安合回归测试场景。 该项目帮助构建者和防御者验证对提示词、模型、工具、检索来源、记忆、审批流程或 MCP 集成的更改不会重新引入已知的安全故障。 该项目的作用 该项目提供了一个以代码为先的测试框架，用于： 运行可复现的智能体安全滥用案例场景 通过策略断言验证预期的安全结果 为本地开发和 CI 生成机器可读的结果 捕获执行追踪以用于调试和审计 为智能体和 MCP 安全风险构建可复用的场景库 该项目不是什么 该项目不是： 基准测试 扫描器...

rtl8812au

RTL8812AU/21AU 与 RTL8814AU 无线驱动 仅适用于 Linux 和 Android 这些驱动已弃用。 请使用 mac80211 驱动，地址为 https://github.com/lwfinger/rtw88 重要说明！ 使用 "ip" 和 "iw" 代替 "ifconfig" 和 "iwconfig" 详细说明见下文，请阅读 README！ 注意：TP-Link AC600 及其他设备存在回归问题。目前的临时解决方案是从之前的提交中拉取代码。请参阅 此评论。 IPERF3 基准测试 设备 Alfa Networks AWUS036ACH 芯片组 88XXau...

coreruleset

分支| 状态 ---|--- main| 🛡️ OWASP CRS OWASP CRS 是一套通用攻击检测规则，用于 OWASP ModSecurity、OWASP Coraza 或其他兼容的 Web 应用防火墙。CRS 旨在保护 Web 应用免受广泛攻击（包括 OWASP Top Ten），同时最大限度减少误报。 📚 CRS 资源、相关项目与工具 请访问 OWASP CRS 页面 了解 CRS 的入门介绍，获取安装、配置及使用 CRS 的资源。该页面还提供了 CRS 相关项目列表 以及适用于开发者和用户的 工具列表。 🤝 为 CRS 做贡献 我们努力让 OWASP CRS...

AutoTTP

AutoTTP Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers & so on can be tedious. I toyed with the idea of making it easier to script Empire or any frameworks/products/toolkits that provide API...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

[SECURITY] [DLA 4821-2] libmodule-cpants-analyse-perl regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4821-2 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 06, 2026 https://wiki.debian.org/LTS -...

roninforge-hono

roninforge-hono Cursor plugin for Hono v4 TypeScript edge web framework + TypeScript. Pinned to hono ^4.12.19, @hono/zod-validator ^0.8.0, @hono/zod-openapi ^1.4.0 peer zod ^4.x, @hono/node-server ^2.0.3 Node 20+. Teaches the v4 APIs that LLMs trained on pre-2024 data do not know c.json always...

regression-scanner

This repository does not have a README...

CVE-2025-26865

CVE-2025-26865: FreeMarker 服务器端模板注入（通过 Apache OfBiz 的 "ecommerce" 插件） 由于在 18.12.17 和 18.12.18 之间引入的回归问题，针对 CVE-2022-25813: Apache OfBiz 中的 FreeMarker 服务器端模板注入 的修复不再生效，从而重新打开了利用 "ecommerce" 插件发起 FreeMarker 服务器端模板注入（SSTI）攻击的可能性。 如果攻击成功，SSTI 可能导致远程代码执行（RCE）。 供应商披露： 该漏洞的供应商披露和修复可在此处找到：here。 要求： 此漏洞需要...

[SECURITY] [DSA 6534-2] webkit2gtk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6534-2 [email protected] https://www.debian.org/security/ Alberto Garcia October 02, 2026 https://www.debian.org/security/faq -...

ftw

Framework for Testing WAFs FTW Purpose This project was created by researchers from ModSecurity and Fastly to help provide rigorous tests for WAF rules. It uses the OWASP Core Ruleset V3 as a baseline to test rules on a WAF. Each rule from the ruleset is loaded into a YAML file that issues HTTP...

WebKitGTK-DND-Fix

WebKitGTK-DND-Fix Cuaderno de investigación y CI para restaurar el arrastrar y soltar confiable de archivos en WebKitGTK y WPE tras CVE-2025-13947. El problema CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg permitía que el contenido web leyera archivos locales mediante arrastrar y soltar en...

CVE-2026-3494_Verfication

CVE-2026-3494 - Verificación de Registro de Auditoría del Plugin serveraudit de MariaDB PoC Este proyecto proporciona un entorno especializado para verificar y analizar una posible omisión del registro de auditoría en el plugin serveraudit de MariaDB cuando se utilizan comentarios en línea...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc (crlsa-2021_1064)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211064 advisory. QEMU: Regression of CVE-2020-10756 fix in virt:Rocky Linux/qemu-kvm in Rocky Linux 8.3 CVE-2021-20295 Tenable has extracted the preceding description block directly...

Rocky Linux 8 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc (crlsa-2022_7928)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227928 advisory. device-mapper-multipath: Regression of CVE-2022-41974 fix in Rocky Linux CVE-2022-3787 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: device-mapper-multipath / device-mapper-multipath-debuginfo / etc (crlsa-2022_8453)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228453 advisory. device-mapper-multipath: Regression of CVE-2022-41974 fix in Rocky Linux CVE-2022-3787 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: libreswan / libreswan-debuginfo / libreswan-debugsource (crlsa-2023_3107)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233107 advisory. libreswan: Regression of CVE-2023-30570 fixes in the Rocky Linux CVE-2023-2295 Tenable has extracted the preceding description block directly from the CIQ security...