sigint-hombre

sigint-hombre 作者： John Page — malvuln 又名 hyp3rlinx 版权所有 c 2026 目的： 在运行时从活跃的 URLhaus 威胁指标 生成派生的 Suricata 检测规则 ，并将其部署到 Security Onion 平台 ，以实现高覆盖率的实时网络监控。 当前版本 v2.0 • 重大重构 • 提升稳定性 • 积极维护 验证（v2 – 脚本完整性） MD5： f92c8100417fc5a992480486203d21f5 SHA256：...

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 受限Shell逃逸" author: sgo category: security Digi TransPort LR54是一款高速LTE路由器，广泛应用于工业、基础设施、零售和公共交通领域。 它支持在受限沙箱中运行Python脚本，并通过SSH提供一个自定义shell，该shell同样受到限制。因此，管理员无法访问底层操作系统。 我发现了一种方法，可以通过利用CLI在执行Python脚本时处理命令行参数的方式，突破沙箱并获得root shell：...

SIGINT_THROUGH_BROTHER_PRINTERS

SIGINTTHROUGHBROTHERPRINTERS My toolkit to collect data through vulnerable printers. uses cve 2017-7588 as entry access, need to develop the implant for the custom firmware, probably will use it for simulating a cyber attack one day...

sigint

SIGINT 实时开源情报仪表盘，在互动式地球仪上显示实时飞机、船只、地震、火灾、天气和事件跟踪。使用 Bun、React 19 以及自定义 Canvas 2D + Web Worker 渲染引擎构建。可作为 PWA 安装。 截图 目录 SIGINT 截图 目录 功能特性 实时数据 情报能力 可视化 平台 安装 快速开始 环境变量 数据源 测试 部署 开发 生产 使用 TLS 的生产环境 Heroku 清理 PWA 文档 许可证 作者 功能特性 实时数据 飞机跟踪（adsb.fi） AIS 船只跟踪（aisstream.io） 地震监测（USGS） 火灾热点检测（NASA FIRMS）...

CVE-2026-29771

Netmaker makes networks with WireGuard. Prior to version 1.2.0, the /api/server/shutdown endpoint allows termination of the Netmaker server process via syscall.SIGINT. This allows any user to repeatedly shut down the server, causing cyclic denial of service with approximately 3-second restart...

The NSA Has a Podcast—Here's How to Decode It

The spy agency that dared not speak its name is now the Joe Rogan of the SIGINT set. And the pod's actually worth a listen...

List of Old NSA Training Videos

The NSAs "National Cryptographic School Television Catalogue" from 1991 lists about 600 COMSEC and SIGINT training videos. There are a bunch explaining the operations of various cryptographic equipment, and a few code words I have never heard of before...

HUMINT in a cyber world

TL;DR HUMINT / Human Intelligence is gathered from a person in the location in question. It’s the sort of information we think of in the context of spying. A modern intelligence apparatus is multi-discipline with many different collection methods. HUMINT sources include officers, agents, diplomat...

CVE-2023-5676

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing...

CVE-2023-5676

CVE-2023-5676 : In Eclipse OpenJ9, prior to 0.41.0, receiving a shutdown signal (SIGTERM, SIGINT, or SIGHUP) before JVM initialization can cause the JVM to enter an infinite busy-wait on a spinlock or crash with a segmentation fault. Affected component: OpenJ9 JVM; root cause: signal handler race...

Reassessing cyberwarfare. Lessons learned in 2022

At this point, it has become cliché to say that nothing in 2022 turned out the way we expected. We left the COVID-19 crisis behind hoping for a long-awaited return to normality and were immediately plunged into the chaos and uncertainty of a twentieth-century-style military conflict that posed...

SUSE: Security Advisory (SUSE-SU-2021:3611-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service (PoC)

Exploit Title: ACTi NVR3 Standard or Professional Server 3.0.12.42 - Denial of Service PoC Date: 2020-08-04 Exploit Author: MegaMagnus Vendor Homepage: https://www.acti.com/ Software Link: https://www.acti.com/DownloadCenter Version: V.3.0.12.42 , V.2.3.04.07 Tested on: Windows 7, Windows 10 CVE:...

Denmark, Sweden, Germany, the Netherlands and France SIGINT Alliance

This paper describes a SIGINT and code-breaking alliance between Denmark, Sweden, Germany, the Netherlands and France called Maximator: Abstract: This article is first to report on the secret European five-partner sigint alliance Maximator that started in the late 1970s. It discloses the name...

openSUSE Security Update : proftpd (openSUSE-2020-31)

This update for proftpd fixes the following issues : - GeoIP has been discontinued by Maxmind boo1156210 This update removes module build for geoip see https://support.maxmind.com/geolite-legacy-discontinuati on-notice/ - CVE-2019-19269: Fixed a NULL pointer dereference may occur when validating...

udisks2 security, bug fix, and enhancement update

2.7.3-9 - Build udisks2-lsm subpackage 1672664 - Fix sigint source removal on daemon exit 1643350 - CVE-2018-17336: Fix format string vulnerability in udiskslog 1637427 - Describe command options in the udisksctl man page 1568269...

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:2050-1)

This update for python3 fixes the following issues : Security issue fixed : CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrec...

SUSE-SU-2019:2050-1 Security update for python3

This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse and urlsplit introduced by the fix for CVE-2019-9636 bsc1138459. - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of...

Security update for bash (moderate)

This update for bash fixes the following issues: Security issues fixed: - CVE-2016-7543: A code execution possibility via SHELLOPTS+PS4 variable was fixed bsc1001299 - CVE-2016-0634: Arbitrary code execution via malicious hostname was fixed bsc1000396 Non-security issues fixed: - Fix repeating...

SUSE SLED12 / SLES12 Security Update : bash (SUSE-SU-2018:1398-1)

This update for bash fixes the following issues: Security issues fixed : - CVE-2016-7543: A code execution possibility via SHELLOPTS+PS4 variable was fixed bsc1001299 - CVE-2016-0634: Arbitrary code execution via malicious hostname was fixed bsc1000396 Non-security issues fixed : - Fix repeating...