aad-bofs

このリポジトリには、さまざまな Azure AD 攻撃用の BOF が収録されています。すべての BOF は、実際のエンゲージメントで実戦テスト済みです。コントリビューションもお気軽にどうぞ :...

thc-hydra

H Y D R A c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for illegal purposes...

CVE-PoC-Hub

🔬 CVE-PoC-Hub — 精選された概念実証エクスプロイト 最近のCVEに対する動作確認済みのPoCスクリプト。ラボ環境でテスト済み。 セキュリティ研究者、ペネトレーションテスター、CTFプレイヤー向け。 ⚠️ 免責事項 すべてのPoCは教育目的および許可されたテスト専用です。 各エクスプロイトは隔離されたラボ環境でテストされています。 明示的な許可なくシステムに対して使用しないでください。 📂 リポジトリ構成 CVE-PoC-Hub/ ├── README.md ├── CVE-2026-XXXXX/ 各CVEに専用フォルダ │ ├── README.md 説明 + 手順 │ ├─...

Exploits

Windows Exploits コンパイル済みかつテスト済みの公開Windowsエクスプロイトのキュレーションアーカイブ。...

yararules

yararules Yara ルール; ルールでもあります。 これは、私自身のYARAルールを、オープンソースから収集した公開済みのYARAルールとまとめたリポジトリです。私が磨き上げ、QAテストを実施済みです。 連絡先: craiu at protonmail.ch...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: vmci: Speculation leaks were prevented by sanitizing the eventdata parameter in the eventdeliver function. Coverity identified that the eventmsg is controlled by user-space. The eventmsg-eventdata.event is passed to eventdeliver...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-sysman: Fixed reference leak issue. If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned. This means that we need to handle it accordingly. Use kobjectput to dispose of...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000 – fixed a potential memory leak in wilcmacxmit The wilcmacxmit function returns NETDEVTXOK without freeing the skb buffer; devkfreeskb was added to fix this issue. This fix has been tested only during compilation...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: think-lmi: Fixed reference leak If a duplicate attribute is found using ksetfindobj, a reference to that attribute is returned, and that reference needs to be disposed of using kobjectput. The validation of the...

PT-2026-90039

Name of the Vulnerable Software and Affected Versions Robotics-STAR-Lab SYSU STAR Group RACER Tested version commit abcdef1234567890 Description A flaw allows an attacker to trigger a denial of service. This occurs through the FastExplorationFSM::optTimerCallback function located in swarm...

CVE-2026-71646

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback in swarmexploration/explorationmanager/src/fastexplorationfsm.cpp...

CVE-2026-71644

A vulnerability exists in Robotics-STAR-Lab (SYSU STAR Group) RACER (affected version: commit abcdef1234567890 ) due to a missing default case in the FSM . This flaw prevents the system from stopping the publication of swarm trajectories when a drone enters the IDLE state, which can lead to unsaf...

CVE-2026-71644: Access of Resource Using Incompatible Type

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

EUVD-2026-76195

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the FastExplorationFSM::optTimerCallback in swarmexploration/explorationmanager/src/fastexplorationfsm.cpp...

CVE-2026-71646

The Robotics-STAR-Lab (SYSU STAR Group) RACER software (affected version: commit abcdef1234567890 ) is vulnerable to a denial of service (DoS) . The root cause is located within the FastExplorationFSM::optTimerCallback() function in the file swarm_exploration/exploration_manager/src/fast_explorat...

CVE-2026-71645: Improper Check or Handling of Exceptional Conditions

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

EUVD-2026-49766

Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...