metasploit-framework

Metasploit Framework El Metasploit Framework es una herramienta de código abierto publicada bajo una licencia estilo BSD. Para obtener información detallada sobre la licencia, consulte el archivo COPYING. Última versión Acceda a la última versión de Metasploit desde la página Instaladores...

MAL-2026-17771 Malicious code in ksp-client-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b11a639f5149e4b1c17e64eb78f226abece5ed03152b5933333a3cb56284018 The npm package [email protected] ships a prebuilt native addon at prebuilds/linux-x64/addon.node that is loaded by the package main...

CVE-2026-108728

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

CVE-2026-108728 Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

CVE-2026-108728

Flyte versions 2.0.1 through 2.0.51 are vulnerable to a cleartext secret exposure vulnerability within the embedded secret manager webhook . The root cause is that the webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable . This allows users with Pod read ...

CVE-2026-108728 Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

EUVD-2026-96894

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

Authorization Bypass Through User-Controlled Key

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the addnewmodel and canusermaketeammodelcall functions in modelmanagementendpoints.py, which authorize the caller by rol...

sitrep

SitRep Triaje de host extensible y configurable. Propósito SitRep pretende proporcionar una alternativa ligera y extensible para el triaje de hosts. Las comprobaciones se cargan dinámicamente en tiempo de ejecución desde archivos independientes. Esto permite a los operadores modificar rápidamente...

hontel

HonTel HonTel es un Honeypot para el servicio Telnet. Básicamente, es una aplicación Python v2.x que emula el servicio dentro del entorno chroot. Originalmente fue diseñado para ejecutarse en entornos Ubuntu/Debian, aunque se puede adaptar fácilmente para cualquier entorno Linux. Documentation:...

cheat-engine

Cheat Engine Cheat Engine es un entorno de desarrollo centrado en la modificación de juegos y aplicaciones para uso personal. Descarga Ultima versión Versiones antiguas Enlaces Website Forum Forum alternativo Wiki Redes sociales Reddit Twitter Donaciones Patreon PayPal Instrucciones de compilació...

testenv

Entorno de pruebas de inyección SQL Una colección de páginas web vulnerables a fallos de inyección SQL y más: conf/ - archivos de configuración del sistema operativo utilizados por deployment.sh. dbs/ - bases de datos independientes para algunos sistemas de gestión de bases de datos p. ej...

kubernetes-goat

Kubernetes Goat ✨ Il Kubernetes Goat è progettato per essere un ambiente cluster intenzionalmente vulnerabile per imparare e praticare la sicurezza di Kubernetes 🚀 🙌 Fai riferimento a https://madhuakula.com/kubernetes-goat per la guida 📖 🧰 Configurazione di Kubernetes Goat Assicurati di avere...

NodeGoat

NodeGoat Essendo leggero, veloce e scalabile, Node.js sta diventando una piattaforma ampiamente adottata per lo sviluppo di applicazioni web. Questo progetto fornisce un ambiente per apprendere come i rischi di sicurezza OWASP Top 10 si applicano alle applicazioni web sviluppate con Node.js e com...

CVE-2026-108978: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c13f1ed95ec9...

CVE-2026-108728: Cleartext Storage of Sensitive Information

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment...

PT-2026-110131

Name of the Vulnerable Software and Affected Versions Flyte versions 2.0.1 through 2.0.51 Description An issue exists where secrets are stored in cleartext, allowing users with Pod read access to obtain sensitive information by reading init container environment variables. The embedded secret...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

like-dbg

LIKE-DBG LIKE-DBG LI nux-KE rnel-D e B u G ger mira ad automatizzare i passaggi noiosi quando si cerca di impostare un ambiente di debug del kernel Linux. Ho deciso di addentrarmi nella ricerca sullo sfruttamento del kernel e ho trovato le soluzioni esistenti non abbastanza utilizzabili. Pertanto...

CLEANSTART-2026-ZG38480 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope

Security vulnerability affects the airflow-3 package. Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope...