tf-mythic-azure

Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...

AI-driven-MITRE-Attack

POC : AI-driven MITRE Attack Detection and Alert Enrichment This repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM. Overview The project is divided into two main components : 1. Machine Learning Model ML ...

PoC_CVE-2025-48507

Breaking TrustZone on Zynq UltraScale+ MPSoCs - Proof of Concept for CVE-2025-48507 and CVE-2025-0038 Non-Secure Software could exploit CVE-2025-48507 and CVE-2025-0038 to gain read/write access to Secure World on Zynq UltraScale+ platforms , thereby breaking TrustZone isolation. To that extent,...

onnx-tf (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-115922 via onnx (0.2.0)

onnx PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on onnx and may be impacted: - onnx-tf =0.1.0, =0.1.1 Source cves: CVE-2026-115922 Source advisory: OSV:GHSA-Q69G-F4F5-V8M7...

onnx-tf (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-115919 via onnx (0.2.0)

onnx PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on onnx and may be impacted: - onnx-tf =0.1.0, =0.1.1 Source cves: CVE-2026-115919 Source advisory: OSV:GHSA-48M4-24CQ-37QF...

CVE-2026-50787

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

PT-2026-116996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binder module where a TF UPDATE TXN transaction that supersedes a pending async transaction in a frozen process is freed using kfree directly. This action bypasses...

PT-2026-128388

In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on TF UPDATE TXN supersede When a TF UPDATE TXN transaction supersedes a pending async transaction in a frozen process, the outdated transaction is freed with kfree directly. This skips binder free tx...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65148 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65148 Source advisory: MEND:CVE-2026-65148...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65150 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65150 Source advisory: MEND:CVE-2026-65150...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65149 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65149 Source advisory: MEND:CVE-2026-65149...

nvidia-dali-tf-plugin-cuda120 (2.2.0) potentially affected by CVE-2026-65147 via nvidia-dali-cuda120 (2.2.0)

nvidia-dali-cuda120 PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-dali-cuda120 and may be impacted: - nvidia-dali-tf-plugin-cuda120 2.2.0 Source cves: CVE-2026-65147 Source advisory: MEND:CVE-2026-65147...

PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of signal data calculated from imported CSV trace files. It may allow attackers to induce users with permission for the “Read diagnostics” function to...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from the improper cleaning of the names of calculation signals in the imported CSV tracking files. It may allow attackers to induce authorized users with “read diagnosis”...

Siemens SIMATIC Drive Controller CPU 1504D TF: Code injection vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a code injection vulnerability. This vulnerability stems from an improper limitation of the executable content contained in the imported trace files. It may allow attackers to induce authorized users with access to the “Read diagnostics”...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from rendering the signal names from the imported CSV tracking files in the Trace page’s menu, without properly cleaning those names. This can lead to cross-site scripting attacks...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the failure to properly validate and clean up the visual marker data in the imported CSV tracking files. This could allow attackers to induce authorized users with the “Read...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability arises from the improper validation and cleanup of the visual properties of signals before they are calculated in the imported CSV tracking files rendered on the Trace page. This allows...

Siemens SIMATIC Drive Controller CPU 1504D TF cross-site scripting vulnerability

The Siemens SIMATIC Drive Controller CPU 1504D TF has a cross-site scripting vulnerability. This vulnerability stems from the improper cleaning of annotation fields in the trace files rendered on the Trace page. As a result, attackers can induce authorized users with the “Read diagnostics” functi...