conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

DELTA

DELTA: MARCO DE EVALUACIÓN DE SEGURIDAD SDN ¿Qué es DELTA? DELTA es un marco de pruebas de penetración que regenera escenarios de ataque conocidos para diversos casos de prueba. Este marco también proporciona la capacidad de descubrir problemas de seguridad desconocidos en SDN mediante el empleo ...

Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed

Plantilla de Nuclei para CVE-2022-1388 BIG-IP iControl REST Expuesto 06 de mayo de 2022 Esto solo verifica la presencia de la API accediendo al endpoint de autenticación Esta vulnerabilidad puede permitir que un atacante no autenticado con acceso de red al sistema BIG-IP a través del puerto de...

CVE-2022-1388

CVE-2022-1388 Vulnérabilité REST iControl BIG-IP CVE-2022-1388 Cette vulnérabilité peut permettre à un attaquant non authentifié ayant un accès réseau au système BIG-IP via le port de gestion et/ou les adresses IP self d'exécuter des commandes système arbitraires, de créer ou supprimer des...

scour

Scour - Framework di Rilevamento AWS Questo strumento viene utilizzato per emulare modelli di attacco all'interno del Controlplane AWS. Ogni attacco è etichettato con uno specifico UA per consentire al blue team di identificarlo. Stato Questo è ancora un lavoro in corso. Molti bug Non pronto per ...

OpenClawMachines

OpenClaw Machines Esegui tutti gli agenti OpenClaw isolati di cui hai bisogno, su hardware di tua proprietà. OpenClaw Machines è una piattaforma open-source per eseguireOpenClaw in sandbox AI sicure sulla tua infrastruttura. Un piano di controllo orchestra i tuoi host, e ogni agente viene eseguit...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git root@kitploit: git clone...

Platypus

Platypus Un hub di gestione degli host per flotte di macchine Linux. Installa l'agente Platypus su ogni host che possiedi; l'agente si riconnette al tuo server Platypus tramite TLS + protobuf; dal server ottieni una shell interattiva, gestione dei file e tunneling di rete su ogni host gestito —...

CVE-2022-1388

CVE-2022-1388 Impatto Questa vulnerabilità potrebbe consentire a un utente malintenzionato non autenticato con accesso di rete al sistema BIG-IP tramite la porta di gestione e/o gli indirizzi IP self di eseguire comandi arbitrari di sistema, creare o eliminare file o disabilitare servizi. Non vi ...

CVE-2020-5902

CVE-2020-5902 F5 BIG-IP Traffic Management User Interface TMUI Remote Code Execution In den BIG-IP-Versionen 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1 und 11.6.1-11.6.5.1 weist die Traffic Management User Interface TMUI, auch als Configuration-Utility bezeichnet, eine...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN प्रमाणीकरण बायपास 📌 अवलोकन CVE-2026-20127 एक गंभीर प्रमाणीकरण बायपास भेद्यता है जो Cisco Catalyst SD-WAN घटकों, जिसमें नियंत्रक और प्रबंधन प्रणालियाँ शामिल हैं, को प्रभावित करती है। एक दूरस्थ अप्रमाणित हमलावर SD-WAN नियंत्रण तल में अनुचित प्रमाणीकरण सत्याप...

agentic-dm-gateway

Agentic DM Gateway Sicherheits-Kontrollebene für LLM-Agenten über private Chats typischerweise Discord-DMs. Es sitzt vor deinem Agenten. Es entscheidet, wer sprechen darf, ob die Sitzung entsperrt ist, ob der Prozess angehalten ist und ob diese Nachricht sicher genug ist, um weitergeleitet zu...

CVE-2026-73500

A flaw was found in etcd, a distributed key-value store. A remote attacker can exploit this by opening numerous TCP connections to an etcd TLS listener without completing the TLS handshake. This action causes the tlsListener.acceptLoop to spawn an unbounded number of goroutines, which consume...

EUVD-2026-61067

A flaw was found in the submariner-operator component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource CR, to specify an unvalidated image path. This lack of validation...

CVE-2026-66783

A flaw was found in the submariner-operator component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource CR, to specify an unvalidated image path. This lack of validation...

CVE-2026-12564

CVE-2026-12564 is a critical (CVSS 9.6) SSRF vulnerability in the AAP Controller's HashiCorp Vault credential plugin . The kubernetes_auth() function in awx_plugins/credentials/hashivault.py sends the controller pod's Kubernetes service account token to an attacker-controlled URL when a Vault Sec...

SUSE CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

EUVD-2026-57642

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CVE-2026-18679

When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplane authentication token is sent over that unverified connection. An on-path actor can intercept the dataplane...

CVE-2026-18678

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection. An attacker on the network path between the operator and the control plane can intercept user or admin API...