osiris

⬡ OSIRIS Open Source Intelligence & Reconnaissance Integrated System A real-time global intelligence dashboard that aggregates live flight tracking, CCTV networks, earthquake monitoring, conflict zone mapping, and 24/7 news feeds into a single GPU-accelerated interface. Live Demo · Report Bug ·...

ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CVE-2025-29557

CVE-2025-29557 – Divulgación de Credenciales de la API de Configuración de Correo de ExaGrid 📝 Resumen Título de la Vulnerabilidad : Divulgación de Credenciales SMTP a través de la API de Configuración de Correo Producto : Dispositivo de Respaldo ExaGrid EX10 Versiones Afectadas : 6.3 – 7.0.1.P08...

fusionpbx_rce_vulnerability

Prelude This simple code tries to complete the implementation of the chained vulnerability introduced by Dustin Cobb at RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE Reproduction Steps 1. View the vulnerable operator screen in a web browser, located in this example at...

CVE-2024-53900

es-define-property Object.defineProperty, but not IE 8's broken one. Example const assert = require'assert'; const $defineProperty = require'es-define-property'; if $defineProperty assert.equal$defineProperty, Object.defineProperty; else if Object.defineProperty assert.equal$defineProperty, false...

CVE-2025-59470-PostgreSQL-Command-Injection

Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: druid, dependency-track, strimzi-kafka-operator, apache-nifi, infinispan, apicurio-registry, gradle, keycloak, scala, apache-nifi-registry, flyway, apache-tika, sonarqube, logstash, opensearch, trino, spdx-tools-java, tez, cass-config-builder, spark, wildfly,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: druid, dependency-track, strimzi-kafka-operator, apache-nifi, infinispan, apicurio-registry, gradle, keycloak, scala, apache-nifi-registry, flyway, apache-tika, sonarqube, logstash, opensearch, trino, spdx-tools-java, tez, cass-config-builder, spark, wildfly,...

PT-2026-104557

Name of the Vulnerable Software and Affected Versions Dell Container Storage Modules CSM Operator versions prior to 1.18.0 Description An improper privilege management issue exists in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could exploit this flaw t...

CVE-2026-104055

The postgresql-operator charm runs a Prometheus postgresexporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover th...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: apache-nifi, floci-az, celeborn, allure2, nuxeo, strimzi-kafka-oauth, jmeter, flyway-fips, seata, apache-polaris-fips, knative-kafka-broker, elasticsearch-fips, spark-fips, opensearch-fips, kafbat-ui, strimzi-kafka-operator-fips, strimzi-kafka-oauth-fips,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: apache-nifi, floci-az, celeborn, allure2, nuxeo, strimzi-kafka-oauth, jmeter, flyway-fips, seata, apache-polaris-fips, knative-kafka-broker, elasticsearch-fips, spark-fips, opensearch-fips, kafbat-ui, strimzi-kafka-operator-fips, strimzi-kafka-oauth-fips,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: apache-nifi, floci-az, celeborn, allure2, nuxeo, strimzi-kafka-oauth, jmeter, flyway-fips, seata, apache-polaris-fips, knative-kafka-broker, elasticsearch-fips, spark-fips, opensearch-fips, kafbat-ui, strimzi-kafka-operator-fips, strimzi-kafka-oauth-fips,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: apache-nifi, floci-az, celeborn, allure2, nuxeo, strimzi-kafka-oauth, jmeter, flyway-fips, seata, apache-polaris-fips, knative-kafka-broker, elasticsearch-fips, spark-fips, opensearch-fips, kafbat-ui, strimzi-kafka-operator-fips, strimzi-kafka-oauth-fips,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: druid, dependency-track, cassandra, celeborn, strimzi-kafka-operator, wavefront-proxy, neo4j, gradle, thingsboard, sonarqube, logstash, opensearch, strimzi-kafka-oauth, cassandra-reaper, spdx-tools-java, tez, cass-config-builder, spark,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: druid, dependency-track, cassandra, celeborn, strimzi-kafka-operator, wavefront-proxy, neo4j, gradle, thingsboard, sonarqube, logstash, opensearch, strimzi-kafka-oauth, cassandra-reaper, spdx-tools-java, tez, cass-config-builder, spark,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: druid, dependency-track, cassandra, celeborn, strimzi-kafka-operator, wavefront-proxy, neo4j, gradle, thingsboard, sonarqube, logstash, opensearch, strimzi-kafka-oauth, cassandra-reaper, spdx-tools-java, tez, cass-config-builder, spark,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: druid, dependency-track, cassandra, celeborn, strimzi-kafka-operator, wavefront-proxy, neo4j, gradle, thingsboard, sonarqube, logstash, opensearch, strimzi-kafka-oauth, cassandra-reaper, spdx-tools-java, tez, cass-config-builder, spark,...

GO-2026-6596 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui, kubescape, cilium, kubescape-operator...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller, helm-push, kyverno-notation-aws, maru, helm-mapkubeapis, k9s, kargo, kube-arangodb, opentofu, rancher-helm, gitness, helm-set-status, k8sgpt, tigera-operator, xeol, flux-helm-controller, manifest-tool, cert-manager-cmctl...