3883 matches found
GO-2025-4245 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-fips, argo-cd-fips, datadog-agent-fips, k3s, k8sgateway, argo-workflows, jaeger, opentelemetry-collector-contrib, keda-fips, rke2-runtime, amazon-cloudwatch-agent-fips, splunk-otel-collector, amazon-cloudwatch-agent,...
GO-2025-4010 vulnerabilities
Vulnerabilities for packages: cis-operator, yace-fips, promxy, ipfs-cluster-fips, kubernetes-dashboard-metrics-scraper, dagdotdev, nvidia-nsight-compute-13.2, pgpool2exporter, extism, gotestsum, yunikorn-k8shim-fips, seaweedfs-operator, configmap-reload, hydra, prometheus-statsd-exporter,...
GO-2024-3005 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-fips, slsa-verifier, tekton-chains, dagdotdev, cosign, ctop, dagger, kaniko-fips, wolfictl, helm-operator, cadvisor-fips, helm-push, buildkitd, ko, crossplane, k3d, cert-manager-cmctl-fips, kpt, cosign-fips, cadvisor, helm-fips, eksctl, k8sgpt...
GO-2026-5099 vulnerabilities
Vulnerabilities for packages: argocd-image-updater...
GO-2026-5381 vulnerabilities
Vulnerabilities for packages: mc, splunk-otel-collector, amazon-cloudwatch-agent-operator, metrics-server, karma, opentelemetry-collector, trillian, minio, k8sgpt, opentelemetry-operator, loki, prometheus-pushgateway, fluent-bit-plugin-loki, mcp-grafana, certificate-transparency, tempo,...
DEBIAN-CVE-2026-66021
Bulletin has no description...
MazeRunner: Nonlinear Task and Clue Orchestration for LLM-Driven Black-Box Automated Penetration Testing
Penetration testing is essential yet resource-intensive. Although large language models LLMs show promise for automating security auditing, existing agents mainly execute end-to-end workflows in simplified linear scenarios. Real-world black-box testing is fundamentally nonlinear: the attack graph...
Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
xss2shell-pro
XSS2Shell PRO v4.0 — WordPress XSS→RCE Automated Testing Platf...
Why API Discovery Is Critical for Modern AppSec Programs
Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...
DEBIAN-CVE-2026-53791
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
CVE-2026-63424
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...
ECHO-4F46-4DDD-9DFD
Bulletin has no description...
CVE-2026-71194
creationtimestamp| type| source ---|---|--- 2026-08-13 10:21:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-71194...
CoSA: Context-Aware Severity Assessment Via Context Analysis with Large Language Models
Accurate vulnerability severity assessment is essential for prioritizing remediation, yet manually assessing Common Vulnerability Scoring System CVSS base metrics remains labor-intensive. Existing automated approaches often fail to capture the repository-level evidence required for assessing many...
PT-2026-71554
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
PT-2026-71416
CWE-306: Missing Authentication for Critical Function...
MINI-MWWF-6HXM-GPXW
Bulletin has no description...