Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

LinusWare-Source-Code-Internal

Linusware 1.2 — Source Code & Engine Architecture Reconstructed, Reverse-Engineered & Documented by tekkenbugatti Target Platform: Linux x8664 / Luau / Roblox Runtime Engine Overview Linusware 1.2 is a native Linux x8664 runtime extension and execution engine for Roblox / Luau. This repository...

GhostInTheNet

GhostInTheNet Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan Properties: Network Invisibility Network Anonymity Protects from MITM/DOS Transparent Cross-platform Minimalistic Dependencies: Linux 2.4.26+ - will work on any Linux-based OS, including...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...

EvtMute

EvtMute This is a tool that allows you to offensively use YARA to apply a filter to the events being reported by windows event logging. Usage Grap the latest verison from here. EvtMuteHook.dll contains the core functionality, once it is injected it will apply a temporary filter which will allow a...

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

CVE-2026-85254

CVE-2026-85254 — camel-platform-http: request-header echo suppression bypass header-name case Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the guard that stops a request header being reflected into the response compared header names case-sensitively , while HTTP...

ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

power-tracks-research

Power Tracks Research Comprehensive research repository for "Power Tracks," "Stock Galaxy," and "Warped Prism" market mechanics. This codebase contains the tools, pipelines, and validation suites used to uncover and map systemic anomalies in modern market microstructure. Structure The research is...

deleting-the-trace

Control-token injection attacks on tool-using agents Code and logged measurements for a study of two input-level attacks on tool-using language model agents. The first attack appends a short string of a model's own channel-control tokens to untrusted input; the tokenizer reads it as an...

Amazon Linux 2 : amazon-efs-utils (ALAS-2026-4069)

The version of amazon-efs-utils installed on the remote host is prior to 3.3.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4069 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate...

CVE-2026-61739

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in backend/app/incidents/routes/incidentalert.py omit role and tenant authorization, and POST...

CVE-2026-61739 SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in backend/app/incidents/routes/incidentalert.py omit role and tenant authorization, and POST...

CVE-2026-61739

Prior to version 0.1.77 , SOCFortress CoPilot is vulnerable to an authentication bypass and missing authorization in its Velociraptor Sigma exclusion-management endpoints. The POST /api/incidents/alerts/create/velo-sigma/exclusion endpoint fails to validate credentials because a dependency incorr...

CVE-2026-61739 SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in backend/app/incidents/routes/incidentalert.py omit role and tenant authorization, and POST...

CVE-2026-61739 SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in backend/app/incidents/routes/incidentalert.py omit role and tenant authorization, and POST...

CVE-2026-18702

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

CVE-2026-118657: Origin Validation Error

Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from any client. A client that reaches Echo directly over plaintext HTTP can claim an HTTPS scheme and bypass HTTPSRedirect because the request is treated as already secure...

CVE-2026-116018

ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential notification IDs to suppress unread indicators of...

Linux Distros Unpatched Vulnerability : CVE-2026-105243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event L...