trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image Filesystem Git Repository remote Virtual Machine Image Kubernetes...

FACT_core

固件分析与比较工具 FACT 目录 为什么选择FACT？ 设置 使用 文档 贡献 额外插件 分析导入/导出 演讲 社交 致谢 许可证 为什么选择FACT？ 固件分析可用于实现多种有趣的目标，其中最主要的是识别黑盒固件的功能、组件和潜在安全弱点。 固件分析与比较工具（FACT）旨在尽可能自动化手动固件分析工作。FACT 结合了一组不断扩展的强大分析功能，创建了一个统一界面，将用户从任意固件样本带到完成的分析结果。FACT 分析的一些关键特性是，结果： 可浏览 可搜索 可比较 此外，FACT 提供了多种导航和可视化分析结果以及固件内容的方式，以便轻松访问。主要的 FACT 界面是一个基于...

MemMorph: Tool Hijacking in LLM Agents Via Memory Poisoning

LLM-driven agents are capable of selecting external tools to complete users' tasks. However, attackers could compromise such process, steering agents toward inappropriate/wrong tools and enabling malicious actions. Most existing attacks primarily manipulate the tool metadata, which is easily...

cyber-security-project-

cyber-security-project- A Vulnerability Scanner is a cy...

Microsoft Azure Monitor Agent 代码问题漏洞

Microsoft Azure Monitor Agent is a monitoring agent program developed by the American company Microsoft. There are code-related vulnerabilities in Microsoft Azure Monitor Agent. Attackers can exploit these vulnerabilities to gain higher privileges...

CVE-2021-27454

The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 all firmware versions prior to 02A04.1...

MCP-In-SoS: Risk Assessment Framework for Open-Source MCP Servers

Model Context Protocol MCP servers have rapidly emerged over the past year as a widely adopted way to enable Large Language Model LLM agents to access dynamic, real-world tools. As MCP servers proliferate and become easy to adopt via open-source releases, understanding their security risks become...

The vulnerability of the widgetkey variable in the widgets/log.widget.php file of the software network interface layer based on the FreeBSD Netgate pfSense operating system allows a intruder to execute arbitrary code.

The vulnerability of the widgetkey variable in the widgets/log.widget.php file of the FreeBSD Netgate pfSense software layer is related to the lack of security measures for protecting the website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

EUVD-2020-25431

Malware in sbrugna...

EUVD-2020-25850

Malware in sbrugna...

EUVD-2021-2039

Malware in sbrugna...

EUVD-2023-47439

Malicious code in bioql PyPI...

Fedora 42 : libssh (2025-9826857157)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9826857157 advisory. New upstream release fixing the following security weaknesses CVE-2025-8114, CVE-2025-8277 Tenable has extracted the preceding description block...

It Looks Like a School Bathroom Smoke Detector. A Teen Hacker Showed It Could Be an Audio Bug

A pair of hackers found that a vape detector often found in high school bathrooms contained microphones—and security weaknesses that could allow someone to turn it into a secret listening device...

Can Large Language Models Automate the Refinement of Cellular Network Specifications?

Cellular networks serve billions of users globally, yet concerns about reliability and security persist due to weaknesses in 3GPP standards. However, traditional analysis methods, including manual inspection and automated tools, struggle with increasingly expanding cellular network specifications...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

Mattermost Fails to Enforce Certain Search APIs

Mattermost versions 10.4.x = 10.4.2, 10.3.x = 10.3.3, 9.11.x = 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries...

CVE-2025-29779

Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing VSS scheme. In versions 0.8.0b2 and prior, the secureredundantexecution function in feldmanvss.py attempts to mitigate fault injection attacks by executing a function...

CVE-2025-29779

The CVE describes a fault-injection countermeasure weakness in the Python implementation of Post-Quantum Secure Feldman’s Verifiable Secret Sharing (VSS) in PostQuantum-Feldman-VSS, specifically the secure_redundant_execution function. Affected versions up to 0.8.0b2 are vulnerable because Python...

Outsmarting Cyber Threats with Attack Graphs

Cyber threats are growing more sophisticated, and traditional security approaches struggle to keep up. Organizations can no longer rely on periodic assessments or static vulnerability lists to stay secure. Instead, they need a dynamic approach that provides real-time insights into how attackers...