domain_generation_algorithms

Алгоритмы генерации доменов Алгоритмы генерации доменов DGA вредоносных программ, перереализованные на Python. Обзор banjori также известный как MultiBanker 2, BankPatcher Ссылки http://johannesbader.ch/2015/02/the-dga-of-banjori/ Примеры доменов earnestnessbiophysicalohax.com...

cottage

cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...

RAMnesia-Attack

Questa ricerca presenta un'analisi completa di due classi critiche di attacchi alla memoria hardware dei moderni sistemi informatici che utilizzano memoria DDR5: Phoenix Rowhammer Attack CVE-2025-6202 e Attacco RAMnesia CVE-2023-39910 . Entrambi gli attacchi dimostrano vulnerabilità fondamentali...

linux-fingerprint-r503

linux-fingerprint-r503 — accesso tramite impronta digitale per Linux con un Grow R503 + Arduino Un lettore di impronte digitali USB per desktop Linux, assemblato da componenti singoli. Costo totale dei componenti inferiore a 15 $. Sostituto diretto del progetto upstream fprintd — funzionano PAM,...

threat-finder v0.3.0

OffSeq Threat Finder threat-finder finds the vulnerable software actually running on a host — not what a manifest claims — and tells you which findings are network-reachable. It resolves each running service and, with --scope all, every installed OS package to an exact Package-URL and matches it...

pgpdump

pgpdump: عارض حزم PGP Kazu Yamamoto [email protected] 16 أغسطس 2010 نظرة عامة pgpdump هي أداة عرض حزم PGP تُظهر تنسيق حزم OpenPGP RFC 4880 وPGP الإصدار 2 RFC 1991. فيما يلي مثال: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes String - ... New: One-Pass Signature Packettag...

xpfarm

XPFarm Ein Open-Source-Schwachstellenscanner, der bekannte Open-Source-Sicherheitstools hinter einer einheitlichen Web-Benutzeroberfläche bündelt. Index Abschnitt| Beschreibung ---|--- Warum| Motivation und Philosophie hinter XPFarm Eingebundene Tools| Die 10 Open-Source-Tools, die von XPFarm...

BridgeHead

BridgeHead Accesso C++ nativo ad Active Directory via ADWS, senza .NET, senza WCF, senza stack HTTP. BridgeHead è una libreria statica C++20 che implementa l'intero stack del protocollo Active Directory Web Services ADWS direttamente su TCP. Chiamata così dal server bridgehead AD, il gateway...

keeper

keeper Keeper ist ein kryptografischer Geheimnisspeicher für Go. Er verschlüsselt beliebige Byte- Nutzlasten im Ruhezustand mittels Argon2id-Schlüsselableitung und XChaCha20-Poly1305 Standard authentifizierter Verschlüsselung und speichert sie in einer eingebetteten bbolt-Datenbank. Er wird in dr...

SPA: Securing Persistent LLM Agents across Queries with Plan-First Information-Flow Control

Large language model LLM agents increasingly operate over untrusted webpages, documents, tools, and persistent states while exercising authority over security-sensitive resources. Existing defenses typically protect either planning or individual tool interactions, but persistent agents face a...

PT-2026-82728

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize value/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", withou...

Debian dsa-6469 : xrdp - security update

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6469 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6469-1 [email protected] https://www.debian.org/securit...

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations

No Privileges, No Lockout, No Trace: Kerberoasting with SPN Misconfigurations By Maulik Maheta and Henry Bernabe · August 27, 2026 Executive Summary Active Directory misconfigurations are vulnerabilities that attackers can exploit before defenders notice them. This blog exposes a stealthier...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3790-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3790-1 advisory. The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security...

CVE-2026-80206

NLTK before 3.10.3 contains a regular expression denial of service Re...

CVE-2026-74731

In the Linux kernel, the following vulnerability has been resolved: schedext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scxlinksched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs th...

CVE-2026-74726

In the Linux kernel, the following vulnerability has been resolved: bonding: alb: re-check primaryispromisc under RTNL in bondalbmonitor bondalbmonitor reads primaryispromisc under RCU, then drops RCU and takes RTNL via rtnltrylock before undoing the promiscuity it set on the active slave. In tha...

CVE-2026-79777

rclone before v1.75.0 includes full Go stack traces in RC API error re...

CVE-2026-80525

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...

CVE-2026-74580

In the Linux kernel, the following vulnerability has been resolved: vhost: reset the vring metadata cache on vring reconfiguration vq-metaiotlb caches the vhostiotlbmap that backs each vring metadata region, and iotlbaccessok returns early on a cache hit, taking the hit as proof that the region h...