6421 matches found
An Automated Framework for Cybersecurity Policy Compliance Assessment against Security Control Standards
Organizational cybersecurity policies are often examined to determine whether they adequately comply standard security controls. This task is difficult because control statements are abstract, whereas policy documents describe governance practices in varied natural language. As a result,...
PT-2026-39086
Content removed...
mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening
Summary mcp-ssh-tool has released version 2.1.1 with security hardening for transfer path authorization and HTTP bearer authentication. The release addresses: - insufficient local path policy enforcement in transfer-related filesystem handling - incomplete canonicalization and segment-boundary...
EUVD-2026-26712
Bandit is vulnerable to CL.CL request smuggling via unrejected duplicate Content-Length header...
Axonflow fixed bugs by implementing multi-tenant isolation and access-control hardening
Summary Eight independently-filed bug fixes in the v7.1.3 → v7.5.0 release window collectively close a set of multi-tenant isolation, access-control, and policy-enforcement defects in the AxonFlow platform. They are filed as a single consolidated advisory because the recommended remediation is a...
Exploit for Double Free in Apache Http_Server
This is a proactive tool for security auditing. For your GitHub...
RHCOS 4 : OpenShift Container Platform 4.1.18 (RHSA-2019:2860)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2860 advisory. - kibana: Cross-site scripting vulnerability permits perform destructive actions on behalf of other Kibana users CVE-2019-7608 -...
PT-2026-37422
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the cifs sanitize prepath function. This occurs when the function is called with an empty string or a string consisting solely of delimiters, such as "/"...
OpenBao's Namespace Deletion May Not Delete Data Properly
Impact When OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. Patches This will be patched in OpenBao...
GHSA-VV66-6RP4-WR4F OpenBao's Namespace Deletion May Not Delete Data Properly
Impact When OpenBao's initial namespace deletion fails, subsequent retries fail to properly remove all data before marking the namespace as deleted. This can affect any outstanding leases as well as potentially leaving unrelated storage entries around. Patches This will be patched in OpenBao...
Introducing Penetration Test Findings: Unified Offensive Security in Wiz
Streamline pen-testing by unifying findings from bug bounties, manual audits, and Wiz Red Agent into a single, context-rich view...
Exploit for Double Free in Apache Http_Server
☣️ CVE-2026-23918-Elite-Auditor ☣️ Professional Intelligenc...
PT-2026-36988
Name of the Vulnerable Software and Affected Versions Axios versions 1.0.0 through 1.15.1 Description Axios is a promise-based HTTP client for the browser and Node.js. The HTTP adapter reads five configuration properties—auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser—via direct...
Exploit for Insufficient Logging in Mariadb
CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
copy-success — CVE-2026-31431 Compensating Control A defensiv...
Exploit for CVE-2025-48757
cso-vibecheck Senior-CSO security audit skill for vibe-coded...
Exploit for Missing Authentication for Critical Function in Cpanel
🔒 cPanel CVE-2026-41940 / nuclear.x86 Security Audit & Cleanup...
Exploit for CVE-2026-31431
Copy Fail - Defense-in-Depth Primitives for CVE-2026-31431 Ke...
Malicious code in apple-internal-security-audit-v99 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c1a320034eadbc47dbe12b147164f4b003babca198b527d6b725a9f891f188 The package apple-internal-security-audit-v99 was found to contain malicious code. Source: ghsa-malware...