velociraptor

Velociraptor - 엔드포인트 가시성 및 수집 도구. Velociraptor는 Velociraptor Query Language VQL 쿼리를 사용하여 호스트 기반 상태 정보를 수집하는 도구입니다. Velociraptor에 대해 더 알아보려면 다음 문서를 읽어보세요: https://docs.velociraptor.app/ 빠른 시작 Velociraptor가 무엇인지 간단히 확인하려면 다음을 수행하세요: 1. 선호하는 플랫폼Windows/Linux/MacOS에 맞는 바이너리를 릴리스 페이지에서 다운로드하세요. 2. GUI...

espectre

🛜 ESPectre 👻 Wi-Fiスペクトル解析（CSI）に基づく動作検知システム。ESPHomeを介したHome Assistantネイティブ統合対応。 !TIP 新しいML検出器 : ニューラルネットワークベースの動作検知。キャリブレーション不要、デバイス上で動作。これは実験的な機能であり、専用のML検出器ディスカッションでフィードバックを歓迎します。最新の変更を含むスナップショットビルドも利用可能です（機械学習ベースの検出器には-mlアセットを使用）。またはカスタム設定についてはセットアップガイドを参照してください。 目次 3行でまとめると 必要なもの クイックスタート 仕組み...

Beamforming Feedback As a Novel Attack Surface for Wi-Fi Physical-Layer Security

With the rapid evolution of wireless technologies, Wi-Fi has expanded beyond its original role in data transmission to support various emerging applications, particularly in physical-layer security, including device authentication, user authentication, and secret key generation. Despite extensive...

Channel Prediction-Based Physical Layer Authentication under Consecutive Spoofing Attacks

Wireless networks are highly vulnerable to spoofing attacks, especially when attackers transmit consecutive spoofing packets. Conventional physical layer authentication PLA methods have mostly focused on single-packet spoofing attack. However, under consecutive spoofing attacks, they become...

CVE-2026-31967

A flaw was found in HTSlib, a library used for bioinformatics file formats. When processing CRAM Compressed Reference-oriented Alignment Map records, the cramdecodeslice function fails to validate the mate reference ID field. This oversight allows an attacker to craft a malicious CRAM file, which...

SoK: Security Evaluation of Wi-Fi CSI Biometrics: Attacks, Metrics, and Systemic Weaknesses

Wi-Fi Channel State Information CSI has been repeatedly proposed as a biometric modality, often with reports of high accuracy and operational feasibility. However, the field lacks a consolidated understanding of its security properties, adversarial resilience, and methodological consistency. This...

EUVD-2015-1233

Malware in sbrugna...

EUVD-2023-29945

Malicious code in bioql PyPI...

Enhancing Resilience against Jamming Attacks: a Cooperative Anti-Jamming Method Using Direction Estimation

The inherent vulnerability of wireless communication necessitates strategies to enhance its security, particularly in the face of jamming attacks. This paper uses the collaborations of multiple sensing nodes SNs in the wireless network to present a cooperative anti-jamming approach CAJ designed t...

CVE-2022-45177

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...

PT-2025-22220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when bpf redirect peer is used to redirect packets to a device in another network namespace, and the packet is not...

CVE-2025-30202

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and prior to 0.8.5 are vulnerable to denial of service and data exposure via ZeroMQ on multi-node vLLM deployment. In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-no...

CVE-2025-30202

CVE-2025-30202 affects vLLM versions 0.5.2 up to 0.8.4 (prior to 0.8.5) in multi-node deployments. The root cause is an XPUB ZeroMQ socket bound to ALL interfaces on the primary host used for tensor parallelism, which can be accessed by any client with network access. This allows potential data e...

CVE-2025-30202 Data exposure via ZeroMQ on multi-node vLLM deployment

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.5.2 and prior to 0.8.5 are vulnerable to denial of service and data exposure via ZeroMQ on multi-node vLLM deployment. In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-no...

PT-2025-18215

Name of the Vulnerable Software and Affected Versions vLLM versions 0.5.2 through 0.8.5 Description The issue affects vLLM, a high-throughput and memory-efficient inference and serving engine for LLMs. In a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-node communication purposes,...

CSI2Dig: Recovering Digit Content from Smartphone Loudspeakers Using Channel State Information

Eavesdropping on sounds emitted by mobile device loudspeakers can capture sensitive digital information, such as SMS verification codes, credit card numbers, and withdrawal passwords, which poses significant security risks. Existing schemes either require expensive specialized equipment, rely on...

SUSE-FU-2025:0661-1 Feature update for slurm and pdsh

This update for slurm and pdsh fixes the following issues: slurm was updated to version 24.11.1 using package slurm2411: - Security issues fixed: CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes under other users' jobs bsc1236722...

CVE-2022-45177

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...

CVE-2022-45177

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...

CVE-2022-45177

An issue was discovered in LIVEBOX Collaboration vDesk through v031. An Observable Response Discrepancy can occur under the /api/v1/vdeskintegration/user/isenableuser endpoint, the /api/v1/sharedsearch?search=NAME+SURNAME endpoint, and the /login endpoint. The web application provides different...