crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS, or Windows experimental. You have access to a remote network via ssh. You don't necessarily have admi...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

oss-fuzz

OSS-Fuzz: 오픈 소스 소프트웨어를 위한 지속적 퍼징 퍼즈 테스팅은 소프트웨어에서 프로그래밍 오류를 찾는 잘 알려진 기법입니다. 이러한 탐지 가능한 오류 중 상당수는 버퍼 오버플로처럼 심각한 보안 영향을 미칠 수 있습니다. Google은 Chrome 구성 요소의 가이드 인프로세스 퍼징을 배포하여 수천 개의 보안 취약점과 안정성 버그를 발견했으며, 이제 그 서비스를 오픈 소스 커뮤니티와 공유하고자 합니다. Core Infrastructure Initiative 및 OpenSSF와 협력하여 OSS-Fuzz는 현대적인 퍼징 기...

LaRecipe < 2.8.1 Remote Code Execution via SSTI

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection SSTI, which could potentially lead to Remote Code Execution RCE in vulnerable configurations. id: CVE-2025-53833 info:...

tinfoleak

tinfoleak 트위터 인텔리전스 분석을 위한 가장 완벽한 오픈 소스 도구 소개 tinfoleak 는 OSINT공개 출처 정보 및 SOCMINT소셜 미디어 인텔리전스 분야의 오픈 소스 도구로, 트위터에서 정보 추출을 자동화하고 후속 분석을 통해 인텔리전스를 생성합니다. 사용자 식별자, 지리적 좌표 또는 키워드를 입력받아 tinfoleak 는 트위터 타임라인을 분석하여 대량의 데이터를 추출하고 인텔리전스 분석가에게 유용하고 체계화된 정보를 제공합니다. tinfoleak 는 여러 Linux 배포판Kali, CAINE,...

Processwire CMS <2.7.1 - Local File Inclusion

Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...

LionWiki <3.2.12 - Local File Inclusion

LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...

security-advisories

security-advisories Me Chidubem ChukwuTerminal Venom이 게시한 공개 보안 권고로, 오픈소스 및 타사 소프트웨어에 대한 CVE 공개 및 취약점 보고서를 포함합니다...

OpenPLC_v3

OpenPLC 런타임 버전 3 ⚠️ 이 프로젝트는 수명 종료End of Life 상태이며 더 이상 유지 관리되지 않습니다. OpenPLC Runtime v4로 대체되었습니다. 설치 지침, 문서 및 지원을 위해 새 저장소를 방문하십시오. OpenPLC는 사용하기 쉬운 소프트웨어를 기반으로 하는 오픈소스 프로그래밍 가능한 논리 제어기입니다. 우리의 초점은 자동화와 연구를 위한 저비용 산업용 솔루션을 제공하는 것입니다. OpenPLC는 전체 소스 코드를 제공하는 유일한 컨트롤러이기 때문에 산업 사이버 보안 연구를 위한 프레임워크로 많...

CVE-2026-16466 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection...

KLA91278 PE vulnerability in Microsoft Azure

Privilege escalation vulnerability was found in Microsoft Products Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-57104 Exploitation Related products Microsoft-Azure CVE list CVE-2026-57104 critical Solution Install necessary...

CVE-2026-80380

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by cross-site request forgery (CSRF) , allowing a remote attacker with no privileges but requiring user interaction to perform unauthorized actions. The flaw is attributed to open source software components within the product, as indicated b...

CVE-2026-80434 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to manipulate runtime caches and cause a denial of service due to an insecure direct object reference...

CVE-2026-82100 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-82107 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to improper authentication...

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police AFP said two men...

CVE-2026-7657

IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery SSRF due to incomplete and ineffective SSRF protection enforcement...

CVE-2026-12942

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...

CVE-2026-16624 CVE-2026-16624

Cal.com OSS ships lacks authorization on webhook teamId creation, allowing any authenticated user to create a webhook on any team via unvalidated teamId injection, then steal booking data, including fields like organizer/attendee emails and custom responses, and conditionally video-call passwords...