Argus

Argus 安全情报框架 Argus 是一个多阶段安全侦察与分析框架，专为专业渗透测试和攻击面评估而构建。它完全...

aquatone

AQUATONE Aquatone は、多数のホストにわたるウェブサイトの視覚的検査を行うためのツールであり、HTTPベースの攻撃対象領域を迅速に把握するのに便利です。 インストール 1. Google Chrome または Chromium ブラウザをインストールします。注意: Google Chrome は ヘッドレス モードで実行すると現在信頼性の低い結果を出力するため、最良の結果を得るには Chromium をインストールすることをお勧めします。 2. お使いのオペレーティングシステム用の Aquatone の最新リリースをダウンロードします。 3. zip...

Scout2

AWS Scout2 .. image:: https://travis-ci.org/nccgroup/Scout2.svg?branch=master :target: https://travis-ci.org/nccgroup/Scout2 .. image:: https://coveralls.io/repos/github/nccgroup/Scout2/badge.svg?branch=master :target: https://coveralls.io/github/nccgroup/Scout2 .. image::...

metabadger

Metabadger AWS EC2 における SSRF 攻撃を防ぐために、よりセキュアなインスタンスメタデータサービス v2 IMDSv2 への自動アップグレードを実現します。 Metabadger 目的と機能 AWS インスタンスメタデータサービスの現在の利用状況を診断・評価し、その仕組みを理解する インスタンスメタデータサービスの v2 へのアップグレードを準備し、v1 の攻撃ベクトルから保護する インスタンスを IMDSv2 のみを使用するように具体的に更新する機能を提供する 不要なインスタンスでインスタンスメタデータサービスを無効にし、攻撃対象領域を減らす機能を提供する AWS...

OTE

OSINT Template Engine OSINT Template Engine is an experimental tool for OSINT Information gathering & Attack Surface Mapping which uses customizable templates to collect data from sources. It allows for new template creation and modification of existing ones which gives it a competitive advantage...

google-osconfig-privesc

Summary The googleosconfigagent process is a component GoogleCloudPlatform https://github.com/GoogleCloudPlatform/osconfig tooling, running on each VM by default. The agent is running as root and responsible for some user-controllable services, including OS config...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098930 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

CVE-2026-79234

Injection in CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759

HCL Hive is affected by an information exposure vulnerability in which Swagger API documentation was publicly accessible to unauthenticated users. No sensitive data (credentials, PII) was discovered, but the exposure increases the overall attack surface by revealing API structure to potential att...

EUVD-2026-64837

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

CVE-2026-21759 HCL Hive is affected by an information exposure vulnerability

HCL Hive is affected by an information exposure vulnerability where Swagger documentation was found exposed publicly. Although no sensitive information e.g., credentials, PII was discovered, exposing API documentation to unauthenticated users can increase the overall attack surface...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm: khugepaged: skip huge page collapse for special files The read-only THP for file systems will collapse the THP for files that are opened in read-only mode and mapped with VMEXEC. The intended use case is to avoid TLB misses f...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102023 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100535 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099696)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099696 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device...

Why API Discovery Is Critical for Modern AppSec Programs

Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure , and such exposure rarely gets tested. Attackers build their own inventory through live reconnaissance; they do not wait for your spreadsheet. API discovery must pul...

Why Generative AI Needs a New Kind of Security

This is Post 2 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of ...

Joern 4.0.594

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

CVE-2026-9856

A vulnerability in huggingface/transformers versions =5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chattemplate dictionary are used directly as...