162 matches found
Nightingale
Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...
nightingale
Open-source alerting for your existing stack Quick start Β· Documentation Β· Download Β· Releases Β· Community English | δΈζ Nightingale brings alert rules, event processing, and notification routing into one place. Connect Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse, and other data...
GO-2026-6638 Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale
Nightingale exposes datasource credentials to low-privilege users in github.com/ccfos/nightingale...
Malicious code in likely-amethyst-nightingale (npm)
Source: amazon-inspector 61539cf179a724bb0de54e901cdf3b06ecfb16207ffe4bbdcf0c601a66fe69c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in legislative-plum-nightingale (npm)
Source: amazon-inspector c837b4ed40d9f1e5bdc5bcad0b0fe3106f258d4ac33639941ebf42c847e08ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dragonfruit-nightingale-lu3u (npm)
The package dragonfruit-nightingale-lu3u was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-85692
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...
CVE-2026-85692 Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...
CVE-2026-85692
Nightingale (n9e) contains an SSRF guard bypass in the isPublicIP function within aiagent/tools/http.go, the SSRF protection for the http_fetch AI-agent tool. The function only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses before checking them against a forbidden-range list, failin...
EUVD-2026-71141
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...
CVE-2026-85692
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...
CVE-2026-85692 Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...
CVE-2026-85692 Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the httpfetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...
Malicious code in courageous-peach-nightingale (npm)
Source: amazon-inspector 7b82c310b25a4f536745c8e6396513f220f2c3582b3324c0d47b16f7ac4004e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in colossal-purple-nightingale (npm)
Source: amazon-inspector c9029ddf5bd11b3e958843fdbf29989b75761e138bae50e83b5788ae80fcce37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in chief-ivory-nightingale (npm)
Source: amazon-inspector b1ff092ca6a77baae9af5437a44730954436afb0a2c9a659944ede4fe769ed19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in central-emerald-nightingale (npm)
Source: amazon-inspector 18df7242b39605d76ccbfb9b4aa6f6674f72512b30e81e8c1157663d798af95e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cautious-moccasin-nightingale (npm)
Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in casual-coffee-nightingale (npm)
Source: amazon-inspector 627f897b658e833bc5a3a9d9a51bf8c87c26d47856944449af53ee8c6d8b29f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
PT-2026-85578
Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http fetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...