Adrenaline

Adrenaline BOF Kit C2 에이전시에 종속되지 않는 Beacon Object FilesBOF 모음으로, 레드팀 및 공격적 보안 운영을 위해 설계되었습니다. BOF는 공격 체인 단계별로 구성되어 있으며, 정찰, 정보 수집, 사후 침투 작업 흐름에서 사용할 수 있도록 작고 모듈화되어 있으며 자동화에 적합합니다. 목차 MITRE 분류 Collection Community Credential Access Discovery Execution Collection BOF| 용도 ---|--- aisurface| Windows...

bordair-multimodal

멀티모달 프롬프트 인젝션 데이터셋 레이블이 지정된 516,588개 샘플공격 251,782개 + 정상 251,576개, 그리고 13,230개 샘플의 실사용 검증 분할 포함은 5가지 데이터셋 버전과 외부 데이터셋 수집에 걸쳐 있으며, AI 시스템에 대한 교차 모달, 다중 턴, 적대적 접미사, 탈옥 템플릿, 간접 인젝션, 도구 조작, 에이전트 기반, 회피, 추론 DoS, 비디오 생성, VLA 로보틱, LoRA 공급망, 오디오 네이티브 LLM, RAG 최적화, MCP 크로스 서버, 코딩 에이전트, 직렬화 경계 및 에이전트 스킬 공급망...

network-threats-taxonomy

네트워크 위협 및 도구 분류체계 머신러닝 기반 침입 탐지 시스템은 네트워크 트래픽과 관련 위협을 정확하게 대표하는 데이터셋의 부족으로 인해 평가하기 어렵습니다. 이 프로젝트에서는 두 가지 분류체계인 "A Taxonomy and Survey of Intrusion Detection System Design Techniques, Network Threats and Datasets"와 "A Taxonomy of Malicious Traffic for Intrusion Detection Systems"를 제시하여 위협을 분류하고 현재...

CVE-2024-12270

CVE-2024-12270 Beautiful Taxonomy Filters = 5.1 AND string error-based - WHERE, HAVING, ORDER BY or GROUP BY clause UPDATEXML' injectable POST parameter 'selects0term' is vulnerable. Do you want to keep testing the others if any? y/N n Ghauri identified the following injection points with a total...

CVE-2026-103662

MISP contains a reflected cross-site scripting XSS vulnerability in the legacy taxonomy tag management confirmation forms add tag and disable tag. The affected forms echoed a user-supplied tag name value from the request unescaped into the rendered HTML output. An attacker who can induce a site...

EUVD-2026-90577

MISP contains a reflected cross-site scripting XSS vulnerability in the legacy taxonomy tag management confirmation forms add tag and disable tag. The affected forms echoed a user-supplied tag name value from the request unescaped into the rendered HTML output. An attacker who can induce a site...

CVE-2026-103662

A reflected cross-site scripting (XSS) vulnerability exists in the MISP legacy taxonomy tag management confirmation forms (specifically the add tag and disable tag forms). The flaw is caused by the application echoing a user-supplied tag name value from the request into the rendered HTML output w...

CVE-2026-103662 MISP Reflected XSS in Taxonomy Tag Confirmation Forms

MISP contains a reflected cross-site scripting XSS vulnerability in the legacy taxonomy tag management confirmation forms add tag and disable tag. The affected forms echoed a user-supplied tag name value from the request unescaped into the rendered HTML output. An attacker who can induce a site...

CVE-2026-103662 MISP Reflected XSS in Taxonomy Tag Confirmation Forms

MISP contains a reflected cross-site scripting XSS vulnerability in the legacy taxonomy tag management confirmation forms add tag and disable tag. The affected forms echoed a user-supplied tag name value from the request unescaped into the rendered HTML output. An attacker who can induce a site...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...

CVE-2026-94297

The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...

EUVD-2026-89625

The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...

CVE-2026-94297 Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation

The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on th...

CVE-2026-94297

The Media Library Organizer WordPress plugin (versions prior to 2.1.4 ) contains a vulnerability where it fails to verify if a requesting user possesses the necessary management capabilities for a target taxonomy. This flaw allows users with contributor-level access or higher to create new, publi...

CVE-2026-82127

The Schema & Structured Data for WP & AMP WordPress plugin (versions before 1.67 ) is vulnerable to a stored cross-site scripting (XSS) flaw. The vulnerability exists because the plugin fails to perform proper capability checks when saving specific fields and lacks sufficient output escaping . Th...

CVE-2026-82127 Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields

The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...

CVE-2026-82127 Schema & Structured Data for WP & AMP < 1.67 - Editor+ Stored XSS via Taxonomy Term Fields

The Schema & Structured Data for WP & AMP WordPress plugin before 1.67 does not perform a capability check when saving several of its fields, nor escape them when outputting them back, allowing users with the editor role and above to inject arbitrary web scripts that execute when a higher...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause FLOOR Payload: taxonomy=category' AND SELECT 7250 FROMSELECT COUNT,CONCAT0x7176707171,SELECT ELT7250=7250,1,0x7162706a71,FLOORRAND02x FROM INFORMATIONSCHEMA.PLUGINS GROUP B...

IntelligentProcessLifecycle

IntelligentProcessLifecycle アクティブサイバーディフェンダーのインテリジェントプロセスライフサイクル 説明 このGitHubリポジトリは、セキュリティ運用サービスにおける誤検知（false positive）とエラーカテゴリに関するポスター関連ファイルを公開しています。目的は、セキュリティオペレーションセンター（SOC）レポートのためのオープンソース報告標準を定義することです。ここで公開するKPIは、運用上のサイバー防御タスクの継続的改善に関連する統計を作成することに焦点を当てています。 この情報は、FIRST 2020で Eireann...

CVE-2026-86802 To Do List Member 1.4 - 1.6 - Unauthenticated Content Injection via Import

The To Do List Member WordPress plugin through 1.6 does not have authorisation or nonce checks in an import routine, and does not validate the location it fetches the imported data from, allowing unauthenticated users to create arbitrary published posts and taxonomy terms on the site...