mac-monitor

🎉 Willkommen in der offiziellen neuen Heimat von "Mac Monitor"! Mac Monitor ist ein fortschrittliches, eigenständiges Systemüberwachungswerkzeug, das speziell für macOS-Sicherheitsforschung, Malware-Triage und System-Fehlerbehebung entwickelt wurde. Es nutzt Apples Endpoint Security ES- und Syste...

auto_re

AutoRE सुविधाएँ 1. डमी-नामित फ़ंक्शनों का ऑटो-रीनेमिंग, जिनमें एक API कॉल या आयातित API पर जंप होता है पहले बाद में 2. कॉल किए गए API-इंडिकेटर के अनुसार फ़ंक्शनों को TAGS असाइन करना टैग को दोहराए जाने वाले फ़ंक्शन कमेंट के रूप में सेट करता है और एक अलग व्यू में TAG ट्री प्रदर्शित करता है TAGS...

reconkg

reconkg Uma ferramenta de triagem de vulnerabilidades. Ela pega o que uma varredura já encontrou, deduz quais CVEs provavelmente se aplicam, informa o quão confiante está e por quê, e fornece os comandos para você verificar por conta própria. Ela não varre nada e não explora nada. Instalação no...

CVE-2024-3400-Compromise-Checker

Verificador de Comprometimento CVE-2024-3400 Um script bash muito simples para verificar evidências de comprometimento relacionadas à CVE-2024-3400 em firewalls Palo Alto. Projetado para fornecer uma triagem inicial rápida de dispositivos potencialmente impactados por meio da verificação da...

sift

Sift Secrets Triage dell'esposizione di credenziali e dati sensibili per le condivisioni di file. Quando compare una condivisione aperta, la domanda non è mai "questo repo ha una chiave divulgata". È "cosa è stato esposto, e cosa devo revocare prima della chiusura dell'attività." sift è costruito...

phantom-playbooks

Questo è il repository Corelight per i playbook della community sviluppati per Splunk Phantom. Questi forniscono alcuni esempi per aiutarti a creare i tuoi playbook. Corelight Investigate DNS Alert Questo playbook prende una ricerca salvata o un meccanismo di alert per DNS da Splunk e recupera lo...

AFLTriage

AFLTriage AFLTriage هي أداة لتصنيف ملفات الإدخال المتسببة في تعطل البرنامج باستخدام مصحح أخطاء. صُممت لتكون محمولة ولا تتطلب أي تبعيات وقت تشغيل، باستثناء libc ومصحح أخطاء خارجي. تدعم تصنيف الأعطال الناتجة عن أي برنامج، وليس فقط AFL، لكنها تتعرف على أدلة AFL بشكل خاص، ومن هنا جاء الاسم. تشمل بعض...

fastfinder

FastFinder Ein leichtgewichtiges Incident-Response-Tool für Threat Hunting und forensische Triage ✨ Übersicht FastFinder ist ein leistungsstarkes, leichtgewichtiges Incident-Response-Tool, das für Cybersicherheitsexperten entwickelt wurde, die Threat Hunting, Live-Forensik und Endpunkt-Triage...

What 50 open source projects taught us about security in the AI era

AI is changing the pace of open source development and the security challenges that come with it. Maintainers are reviewing unfamiliar contributions, managing new attack surfaces, and responding to vulnerabilities with limited time and resources. Session 4 of the GitHub Secure Open Source Fund...

CVE-2026-56174

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:53+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:19:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:50+00:00| seen|...

CVE-2026-73159

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

CVE-2026-73159

CVE-2026-73159 affects certain versions of cti-transmute where a tag’s icon can be stored and later interpolated into HTML via Vue v-html. The root cause is user-supplied icon values that were used to build HTML strings like , enabling potential HTML injection when rendered in the viewer’s browse...

CVE-2026-73159 cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

CVE-2026-73159 cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface

Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html. The helper mapIcon previously constructed an HTML string directly from the icon value: Because the icon is user-supplied, a crafted value could break out of the intended...

Common-Web-Application-Bug-Classes-Cheatsheet

Common Web Application Bug Classes Cheatsheet A defensive ref...

bug-bounty-toolkit

Bug Bounty Toolkit Automated reconnaissance-to-triage pipelin...

Vulnerability Reports Are Not Special Anymore

A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a present, not an obligation. You can accept it, ignore it, and use it partially or not at all. Except… For years, as lead of the Go Security team at the...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization in the authorization process for public assets. An attacker can perform unauthorized actions such as creating, updating, reapplying, and deleting VEX rules, as well as making changes to vulnerability-triage...

GHSA-6P54-FW2F-Q7GF DevGuard has improper authorization on public assets

Impact On a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can create, update, reapply, and delete VEX rules on those public assets. The same flaw affects the oth...

DevGuard has improper authorization on public assets

Impact On a DevGuard API instance with one or more public assets, any authenticated user — including users from a different organization with no membership or role in the affected org/project — can create, update, reapply, and delete VEX rules on those public assets. The same flaw affects the oth...