RXScan

RXScan Raw Excess Scan Bounded reconnaissance and evidence correlation in Rust. RXScan combines network reconnaissance, public-source search, investigation, and evidence correlation in one CLI. It can discover hosts and ports, identify observed services, collect bounded protocol and web evidence,...

tracehound

Deterministic runtime security buffer for high-velocity APIs External systems signal threats. Tracehound preserves evidence. Website · Documentation Index · API Reference · Configuration · RFCs · Security · Changelog Tracehound is a decision-free forensic runtime that sits between upstream...

portclue

PortClue PortClue explains why a TCP port on a Linux machine may or may not be reachable. It turns socket, process, firewall, and Docker state into a short evidence chain instead of making you correlate ss, /proc, nftables, iptables, and docker inspect by hand. Run it without a port to discover...

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY Inspect exploited vulnerabilities and threat indicators, check their source evidence, and review retained changes. Open the live Observatory · Try the KEV walkthrough · Source coverage · Run it yourself The Observatory brings CISA KEV, ThreatFox, URLhaus, and...

CVE-2020-5902

CVE-2020-5902 Exploit para CVE-2020-5902 POC versión bash...

CVE-2025-27520-PoC

CVE-2025-27520 — Simulación educativa segura / PoC Demo Stand ⚠️ Importante: Esta es una simulación educativa y segura de la vulnerabilidad CVE-2025-27520. El proyecto incluye un servicio simulado Flask y un escáner PoC seguro Python. La simulación crea un archivo de evidencia en data/ al recibir...

vestigium

🔎 Vestigium Agente autônomo de análise forense e CTF. Inge...

Forensic-Aware Continual Adaptation for Image Forgery Localization

The rapid evolution of image manipulation techniques has raised growing public security concerns. Existing Image Forgery Localization IFL methods can accurately localize manipulated regions but are often unable to adapt to newly emerging forgeries. In real-world forensic scenarios, data typically...

Continuous Assurance of Agentic Security Auditors for Software Delivery Decision Gates

Large language model LLM-based repository auditors are increasingly deployed as security controls within continuous integration CI pipelines, where their findings admit, block, or delay software changes. As Agentic Software Development Life Cycle SDLC Security Controls, their non-deterministic...

Malicious Package

Overview @wizloft/harness-evidence is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Beyond Centralized Policy Decision Points: Decentralized Sticky Policy Authorization through Evidence Quorums

Sticky policies remain attached to protected data so that access restrictions can persist across systems, yet request-time authorization often still depends on a centralized Trusted Authority or Policy Decision Point PDP. This paper presents SPEAR-Q, a decentralized framework in which independent...

CVE-2026-66069 RabbitMQ: Monitoring-tag DELETE of auth-attempt metrics

RabbitMQ is a messaging and streaming broker. Prior to versions 4.1.13, 4.2.7, and 4.3.0, isauthorized/2 uses isauthorizedmonitor for all methods. DELETE resets rabbitcoremetrics:resetauthattemptmetrics. Impact is cosmetic counters only, no log erasure, but inconsistent with rabbitmgmtwmreset.erl...

CVE-2026-94243

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

EUVD-2026-85182

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

CVE-2026-94243

The Apache Sling Security Bundle is vulnerable to a security flaw where the ReferrerFilter accepts weaker-than-origin evidence. This issue affects all versions before 1.3.2 . To remediate this vulnerability, users are recommended to upgrade to version 1.3.2 . No specific exploit details or in-the...

CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

MAL-2026-16426 Malicious code in @wizloft/harness-evidence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e54dc6763e284dc9a6e7c32583fed8ff36a3a8f7e3c825f6582f679759772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @wizloft/harness-evidence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e54dc6763e284dc9a6e7c32583fed8ff36a3a8f7e3c825f6582f679759772 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2026-94243: Origin Validation Error

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...