ubertooth

Ubertooth Ubertooth 项目是一个开源无线开发平台，适用于蓝牙实验。Ubertooth 自带功能强大的 BLE（Bluetooth Smart）嗅探器，并且可以嗅探 Basic Rate BR 蓝牙经典连接的部分数据。 最新版本为 2020-12-R1。 最新固件构建可在发布页面找到。 此版本与 libbtbb 2020-12-R1 配套发布。 刷写固件的说明可在相应的 readthedocs.io 固件页面找到。 构建 libbtbb 的说明可在相应的 readthedocs.io buildguide 页面找到。 文档 Ubertooth 的文档可在 Read the...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

GhostESP

ESPAUDIOCODEC ESP Audio Codec 组件是由乐鑫为其系列 SOC 开发的官方音频编码与解码处理模块。 ESP Audio Encoder 提供了统一的编码接口，允许注册多个编码器，如：AAC、AMR-NB、AMR-WB、ADPCM、G711A、G711U、PCM、OPUS、ALAC。用户可以基于这些编码接口创建一个或多个编码实例，这些实例可同时进行编码。同时，用户也可以直接调用指定的编码器 API，以减少调用层级。 ESP Audio Decoder...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

freki

Frekiは、無料でオープンソースのマルウェア解析プラットフォームです。 目標 1. マルウェア解析とリバースエンジニアリングを容易にすること。 2. さまざまなプロジェクトに使いやすいREST APIを提供すること。 3. Dockerによる簡単なデプロイ。 4. コミュニティによる新機能の追加を許可すること。 現在の機能 ハッシュ抽出。 VirusTotal APIクエリ。 PEファイルの静的解析 ヘッダー、セクション、インポート、機能、文字列。 Yaraによるパターンマッチング。 WebインターフェースとREST API。 ユーザー管理。 コミュニティコメント。...

Rocket.Chat

面向团队通信的终极安全开源解决方案 Rocket.Chat 是一个开源、安全、完全可定制的通信平台，采用 TypeScript 开发，面向对数据保护有高标准的组织。 我们是团队通信的终极解决方案，支持同事之间、与其他公司以及您的客户或公民之间的实时对话，无论他们以何种方式与您联系。最终带来生产力和用户满意度的提升。 每天，来自 150 多个国家/地区的数千万用户以及德意志银行（Deutsche Bahn）、美国海军（The US Navy）和瑞士信贷（Credit Suisse）等组织都信赖 Rocket.Chat，以确保他们的通信完全私密和安全。 🚀 平台概览 Rocket.Chat...

fleet fleet-v4.91.1

News · Report a bug · Docs · Why open source? · Art Open-source platform for IT and security teams with thousands of computers. Designed for APIs, GitOps, webhooks, YAML, and humans. What's it for? Fleet gives you a single system to secure and maintain all your computing devices over the air. You...

opencti v7.260907.0

Note: THREAD 2026 — 15 October, Paris. Our community conference for threat intelligence and cyber defense practitioners. Talks, labs, workshops, and an evening social. Join us → Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence...

wazuh v5.0.0-beta5

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed n...

[SECURITY] Fedora 43 Update: pgadmin4-9.16-1.fc43

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily read artificial intelligence AI conversions from other customers' applications without requiring...

CVE-2026-34082

Dify is an open-source LLM app development platform. Prior to 1.13.1, the method DELETE /console/api/installed-apps//conversations/ has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue...

CVE-2026-43873

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret $objClone-myKey, a constant md5$global'systemRootPath' . $global'salt' into the HTTP response body on every unauthenticated request. T...

CVE-2026-40882

OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled XML without explicit XXE hardening. An authenticated user who can call the import endpoint may trigger XML external entity processing, which can lead to...

PT-2026-45867

Name of the Vulnerable Software and Affected Versions OpenCTI versions prior to 7.260227.0 Description An issue exists in the rendering of email-message observable body data where the content of the body field is not appropriately sanitized. This allows for Cross-Site Scripting XSS, a technique...

flowintel 安全漏洞

Flowintel is an open-source security analyst case and task management platform developed by flowintel. Versions of FlowIntel 3.3.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the external reference URL detection function in the app/case/task.py file, which has a...

Budibase 安全漏洞

Budibase is an open-source platform developed by Budibase in the UK. It allows for the creation of internal applications, workflows, and management panels within minutes. Versions of Budibase prior to 3.38.2 contained security vulnerabilities. These vulnerabilities stemmed from the failure to...

Fleet 安全漏洞

Fleet is an open-source device management platform developed by Fleet Device Management. It supports various operating systems and devices, and helps IT and security teams with device management, vulnerability reporting, MDM operations, etc. Versions of Fleet prior to 4.80.1 contained security...