FlatPress 1.2.1 - Stored Cross-Site Scripting

FlatPress 1.2.1 contains a stored cross-site scripting vulnerability that allows for arbitrary execution of JavaScript commands through blog content. An attacker can possibly steal cookie-based authentication credentials and launch other attacks. id: CVE-2021-41432 info: name: FlatPress 1.2.1 -...

agent-scanning

Controla tus agentes de IA. Rastrea costos. Mantente conforme. código abierto Qué Hace Un panel para gestionar tu equipo de IA. Característica| Cómo Ayuda ---|--- Conecta tus agentes| Integra OpenAI, Anthropic o agentes personalizados Establece metas y presupuestos| Asigna trabajo, limita costos,...

apache_skywalking

Protocols There are two types of protocols list here. Probe Protocol. Include the descriptions and definitions about how agent send collected metrics data and traces, also the formats of each entities. Query Protocol. The backend provide query capability to SkyWalking own UI and others. These...

cve-2026-71362-magento-lab

CVE-2026-71362 — Magento / Adobe Commerce customer-session identity-switch lab A self-contained, one-command Docker lab that reproduces CVE-2026-71362 end to end and lets you verify Adobe's fix, so defenders, researchers and students can study a real account-takeover primitive on a disposable...

qemu

QEMU LÉEME QEMU es un emulador y virtualizador de máquinas y espacio de usuario genérico y de código abierto. QEMU es capaz de emular una máquina completa mediante software sin necesidad de soporte de virtualización por hardware. Mediante el uso de traducción dinámica, alcanza un rendimiento muy...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

wraithwall-toolkit

WraithWall Open-Source Toolkit Four deception-engineering tools, lifted out of a production security platform that takes live internet traffic, cleaned of all product/secret coupling, and released under MIT. This isn't a lab demo. Each tool is a piece of WraithWall — a solo-built deception platfo...

CVE-2019-13288

Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...

EUVD-2026-38245

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation...

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward...

stylesmuggler-adobe-patches

disrex/stylesmuggler-adobe-patches Magento Open Source および Mage-OS に Adobe公式のAPSB26-146修正 （CVE-2026-75650、内部参照 VULN-39341）を、インストール済みバージョンを自動検出して適用する Composer プラグインです。これは StyleSmuggler ゼロデイに対する修正です。 インストール時および更新時に、インストール済みパッケージ自体にパッチを適用します。cweagans/composer-patches やルートの enable-patching...

Rocket.Chat

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

security-baseline-ubuntu

☕ Support the Project If this practical guide has saved your host from compromise, helped you configure your security baseline, or saved you hours of debugging AppArmor and Firejail profiles, you can support the author and further development of this open-source initiative. ⚠️ OPSEC Warning:...

opencode

El agente de programación con IA de código abierto. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Instalación YOLO curl -fsSL...

Open-Source-Threat-Intel-Feeds

Free Threat Intel/IOC Feeds This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. The CSV ThreatIntelFeeds is stored in a structured manner based on the Vendor, Description, Category and URL. The vendors offering ThreatIntelFeeds a...

CyberQRM

CyberQRM – Gestión Cuantitativa de Riesgos Cibernéticos Una plataforma local de código abierto para la evaluación cuantitativa de riesgos de ciberseguridad utilizando el marco FAIR v3.1 Factor Analysis of Information Risk. Modele amenazas, ejecute simulaciones Monte Carlo, mida la efectividad de...

xalgorix

Xalgorix — 脆弱性を 証明 するオープンソースAIペネトレーションテスター ほとんどのスキャナーは検出するだけ。Xalgorixは証明します。 自律型LLMエージェントが完全なペネトレーションテスト手法を実行し、その後独立した検証者がすべての検出結果を再エクスプロイト してから報告するため、トリアージが必要な不確かなものの山ではなく、証拠が得られます。セルフホスト、プライベート、そしてBring-Your-Own-LLM。Go + TypeScriptで構築。 🚀 クイックスタート · 💡 Xalgorixを選ぶ理由 · ✨ 機能 · 🎯 ユースケース · ☁️ ホステッドクラウ...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

asf__nifi_CVE-2023-36542_1-22-0

Apache NiFi Status Resources Contacts !Track Issueshttps://img...

easysec

EasySec - Español Introducción EasySec es un repositorio el cual incluye múltiples roles, documentación y herramientas con el objetivo de ayudar a las PYMEs con la aplicación de medidas de seguridad en sus propias empresas, además de fomentar ejercicios de pentesting y red teaming. Este archivo...