GO-2023-1900 vulnerabilities

Vulnerabilities for packages: k3d...

GO-2026-5148 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines, argo-workflows-fips, argo-workflows, kubeflow-pipelines-driver-fips...

GO-2025-3774 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, emissary, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, rancher-system-agent, yunikorn-k8shim, vcluster, mesosphere-vsphere-csi, rancher-fleet...

GO-2025-4023 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GO-2025-3751 vulnerabilities

Vulnerabilities for packages: mods, karma, prometheus-adapter, velero-plugin-for-microsoft-azure, licenseclassifier, spire-server, pdfcpu, terraform-provider-azapi, hivemind, terraform, elvish, grpcurl, runc, blobfuse2, smarter-device-manager, wazero, go-bindata, temporal, kube-state-metrics,...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...

Eopi-Hunt-Skill

Eopi-Hunt-Skill Authorized security research toolkit comb...

Agentic AI Security: The Chatbot Era Is Already Over

There is a diagram most security teams still carry in their heads when they think about AI. A user talks to a chatbot. The chatbot talks to a large language model. The model talks back. Put an inspection point in the middle, and the problem is solved. That diagram was accurate for about eighteen...

Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams

Las Vegas, United States, 4th August 2026, CyberNewswire...

Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

PYSEC-2026-642 Horizon-Orchestration Cross-site scripting (XSS) vulnerability through resource name

Cross-site scripting XSS vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard Horizon before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2, when used with Heat, allows remote Orchestration template owners or catalogs to inject...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: tkn, mods, containerd, external-secrets-operator, step, podman, eksctl, spire-server, flux, skaffold, flux-source-controller, kubernetes, chisel, dagger, trivy, istio, crossplane-provider-azure-storage, tekton-chains, ksops, flux-notification-controller, mattermost,...

overflow_exploit_framework

kernel-research — Framework CVE overflow Usage éducatif uni...

EUVD-2026-36087

In Splunk SOAR Security Orchestration, Automation, and Response versions below 8.5.0, an unauthenticated attacker could inject American National Standards Institute ANSI escape codes into SOAR application log files through specially crafted HTTP request paths, which a terminal emulator might...

Containers on fire: from container escapes to supply chain attacks

Introduction Modern infrastructures universally rely on containerization to deploy applications, scale services, and build cloud platforms. The use of Docker, Kubernetes, and similar technologies has become the corporate standard for efficient automation. However, as containers grow in popularity...

UFO³ 安全漏洞

UFO³ is an open-source cross-device collaboration multi-agent task orchestration tool developed by Microsoft. Version UFO³ 3.0.1-4-ge2626659 contains a security vulnerability. This vulnerability stems from variable instance fields being overwritten in the shared WebSocket processor instances, whi...

Towards Cybersecurity SuperIntelligence (CSI): What'S the Best Harness for Cybersecurity?

What is the best harness for cybersecurity AI? Cybersecurity systems are converging on a single execution scaffold per agent, an iterative shell loop driven by a Large Language Model LLM. However, scaffolds are not interchangeable, rarely interoperable, and no single scaffold dominates across all...

netsec-agent

NETSEC-AGENT Autonomous AI Penetration Testing Terminal —...

CVE-2026-25244

WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium. Versions below 9.24.0 contain a command injection vulnerability leading to remote code execution RCE in test orchestration. Git permits branch names containing shell...