sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

GATOR

GCP ATTACK TOOLKIT ДЛЯ ИССЛЕДОВАНИЙ В ОБЛАСТИ БЕЗОПАСНОСТИ GATOR - GCP Attack Toolkit for Offensive Research Набор инструментов для атак на GCP в исследовательских целях, инструмент, предназначенный для помощи в исследовании и эксплуатации облачных сред Google Cloud. Он предлагает широкий спектр...

hayat

Hayat Скрипт аудита и усиления защиты Google Cloud Platform & Что означает «Hayat»? Что ж, честно говоря, мне было трудно найти уникальное имя. «Hayat» — турецкое слово, которое означает «Жизнь» на английском, а также имя моей племянницы. Готовы познакомиться с ней? 😍 😍 😍 Hayat — это скрипт аудит...

pd-agent

ProjectDiscovery Cloud Platform — Агент Что это делает • Быстрый старт • Установка • Конфигурация • Масштабирование Что это делает pd-agent позволяет сканировать ваши собственные внутренние сети с ProjectDiscovery Cloud Platform. Установите агента на машину внутри сети, которую хотите сканировать...

offensive-docker

Offensive Docker — это образ с наиболее популярными инструментами для быстрого и простого создания среды пентеста. ➡️ Примечание: Ознакомьтесь со следующим репозиторием, чтобы узнать, как запустить offen...

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-101104

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

CVE-2026-96613 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw (CWE-862) that allows authenticated users to access the complete device shadow of any device by specifying its device ID . The service fails to verify a relationship between the requester and the target device, le...

EUVD-2026-91750

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-101104 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

EUVD-2026-91746

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

CVE-2026-101104

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate configurations of devices they do not own. By exploiting this flaw, an attacker can alter device settings, trigger unintended behaviors, or access sensitive informatio...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

kubebot

Kubebot Slackbot для тестирования безопасности, построенный на бэкенде Kubernetes в Google Cloud Platform ПРИМЕЧАНИЕ: Я больше не поддерживаю этот проект активно. Я работаю над версией 2 Kubebot вместе с несколькими другими людьми, которая, вероятно, будет представлена на одной из предстоящих...

Meari IoT Cloud Platform OpenAPI Service

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. 2. RECOMMENDED...

PT-2026-104070

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Простой инструмент для подтверждения концепции 🛠 Об этом приложении Этот инструмент демонстрирует техническое подтверждение концепции PoC для проблемы безопасности CVE-2026-2472. Проблема затрагивает Vertex AI Python SDK от Google Cloud Platform. Она...