installer

Descripción general Instalación mql cnspec Escanea tu plataforma objetivo Información del paquete Kubernetes Estado Contenedores Docker: Homebrew: Install.sh: Install.ps1: macOS Pkg: Arch Linux: Instalación La forma más sencilla de instalar mql y cnspec es utilizar los scripts de instalación...

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

dissect

dissect Dissect es un framework y conjunto de herramientas de respuesta a incidentes y forense digital que permite acceder y analizar rápidamente artefactos forenses de varios formatos de disco y archivo, desarrollado por Fox-IT parte de NCC Group. Este proyecto es un paquete meta, que instalará...

kata-containers

Kata Containers Benvenuti in Kata Containers! Questo repository è la sede del codice di Kata Containers per le release 2.0 e successive. Se volete saperne di più su Kata Containers, visitate il sito principale di Kata Containers. Introduzione Kata Containers è un progetto open source e una...

dockernymous

DESPLÁZATE HACIA ABAJO PARA REQUISITOS E INSTRUCCIONES NO FUNCIONARÁ SI NO LOS SIGUES Advertencia: Dockernymous se encuentra en una fase muy temprana de desarrollo. Úsalo solo con fines educativos. ¡NO lo uses si dependes de un anonimato fuerte! Novedades 13.10.2018 Cambié completamente la lógica...

cosign

cosign Firma di container OCI e altri artefatti utilizzando Sigstore! Cosign mira a rendere le firme infrastruttura invisibile. Cosign supporta: "Firma senza chiave" con l'autorità di certificazione Fulcio del bene pubblico Sigstore e il registro di trasparenza Rekor predefinito Firma hardware e...

CVE-2026-103413 Apache Camel Karavan: unvalidated Kubernetes resources applied from a project's kubernetes.yaml

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

PT-2026-108894

Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's kubernetes.yaml and applied every resource it contained to the cluster without restricting the resource kinds, without rejecting security-sensitive pod options, and...

AZL-107081 CVE-2026-97032 affecting package kata-containers-preview 3.27.0~preview2-2

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107562 CVE-2026-97032 affecting package kata-containers 4.1.0.kata0-1

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107589 CVE-2026-97032 affecting package kata-containers-cc 3.15.0.aks0-21

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107553 CVE-2026-78669 affecting package kata-containers 4.1.0.kata0-1

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107577 CVE-2026-78669 affecting package kata-containers-cc 3.15.0.aks0-21

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107102 CVE-2026-78669 affecting package kata-containers-preview 3.27.0~preview2-2

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

AZL-107574 CVE-2026-78660 affecting package kata-containers-cc 3.15.0.aks0-21

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107555 CVE-2026-78660 affecting package kata-containers 4.1.0.kata0-1

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107096 CVE-2026-78660 affecting package kata-containers-preview 3.27.0~preview2-2

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

AZL-107093 CVE-2026-78663 affecting package kata-containers-preview 3.27.0~preview2-2

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107567 CVE-2026-78663 affecting package kata-containers 4.1.0.kata0-1

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

AZL-107087 CVE-2026-78659 affecting package kata-containers-preview 3.27.0~preview2-2

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...