GO-2026-6354 vulnerabilities

Vulnerabilities for packages: rootlesskit-fips, witness, cert-manager, chainctl-fips, semaphore, prometheus-podman-exporter, docker-cli-buildx, clickhouse-backup-fips, mapotf, redpanda-console, nerdctl, coder, opentelemetry-collector-k8s, zot, gitlab-runner-fips, reports-server,...

openclarity

OpenClarity is an open source tool for agentless detection and management of Virtual Machine Software Bill Of Materials SBOM and security threats such as vulnerabilities, exploits, malware, rootkits, misconfigurations and leaked secrets. Join OpenClarity's Slack channel to hear about the latest...

GHSA-XQQH-3W52-Q8P7 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...

GHSA-G47C-3XMW-Q6M2 vulnerabilities

Vulnerabilities for packages: authentik-fips, netbox-fips, netbox, awx, authentik...

GHSA-RH9X-7XJC-VWX2 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, ruby3.4-rails, pact-broker-docker-fips, kube-logging-operator, ruby3.2-rails, gitlab-rails-ce-fips, gitlab-rails-ce, pact-broker-docker...

GHSA-X5FP-WJ9C-MXMX vulnerabilities

Vulnerabilities for packages: azurite, arangodb, dotstatsuite-supercore, tileserver-gl, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, unleash-proxy, tileserver-gl-fips, redisinsight, pelias-api, langfuse-fips, wazuh-dashboard, sqlpad, unleash, unleash-fips,...

GHSA-4MJR-XMP4-GH2G vulnerabilities

Vulnerabilities for packages: azurite, arangodb, dotstatsuite-supercore, tileserver-gl, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, unleash-proxy, tileserver-gl-fips, redisinsight, pelias-api, langfuse-fips, wazuh-dashboard, sqlpad, unleash, unleash-fips,...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui, apache-beam-python-3.13-sdk, nemo, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, label-studio...

CVE-2026-75931 vulnerabilities

Vulnerabilities for packages: prism, nextcloud-server, tileserver-gl, vitess, opensearch-dashboards, yaml-language-server...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-logging-operator, ruby3.2-rails...

Supply-Chain

أمن سلسلة توريد البرمجيات سلسلة شاملة من ثلاثة كتب حول أمن سلسلة توريد البرمجيات، تغطي التهديدات والدفاعات والحوكمة. تقدم هذه المخطوطة مفتوحة المصدر لمحترفي الأمن والمطورين وقادة المؤسسات إرشادات عملية لتأمين ممارسات تطوير البرمجيات الحديثة. سلسلة الكتب الكتاب| العنوان| الفصول| التركيز...

@agiflowai/aicode-toolkit (>=1.2.0, <=1.3.0), @agiflowai/one-mcp (>=0.4.1, <=0.4.2) +30 more potentially affected by CVE-2026-61556 via liquidjs (>=10.26.0, <=10.27.0)

liquidjs NPM version =10.26.0, =1.2.0, =0.4.1, =1.2.0, =1.1.0, =2.0.0-rc.0, =2.0.0-rc.0, =2.0.0-rc.0, =36.0.0-rc.0, =0.0.1-beta.0, =3.0.0, =0.5.0, =0.3024.0, =0.3024.0, =1.1.1 and more Source cves: CVE-2026-61556 Source advisory: OSV:GHSA-M7FP-H3P4-HR49...

source-packages

source-packages 이 저장소는 LinuxFlaw용 취약 프로그램들의 소스 코드를 저장합니다...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.97 packages and security update

Red Hat OpenShift Container Platform release 4.12.97 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

RHSA-2026:54751 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2026-62886

A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized local attacker to elevate their privileges on the system. This could grant the attacker higher access than intended, potentially leading to further system compromise. Mitigation There...

scavenger_scanner

CVE-2025-54313 IOC スキャナー eslint-config-prettier サプライチェーン攻撃（CVE-2025-54313）に関連する侵害指標（IOC）を検出するためのクロスプラットフォームスキャナー。 2025年7月18日、フィッシング攻撃により、いくつかの人気npmパッケージが侵害されました。 攻撃者はメンテナーのnpmトークンへのアクセスを取得し、プラットフォーム固有のマルウェアを含む悪意のあるバージョンを公開しました。 影響を受けるパッケージとバージョン パッケージ| 侵害されたバージョン ---|--- eslint-config-prettier|...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.57 security and extras update

Red Hat OpenShift Container Platform release 4.17.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a security impact of...

teamcity-cve-2026-63077-remediation

Enterprise Security Remediation Suite Производственный набор инструментов безопасности уровня enterprise, содержащий четыре специализированных пакета для реагирования на инциденты и усиления защиты. 📁 Архитектура модулей репозитория root@kitploit: . ├── README.md Индекс корпоративного набора и...

CVE-2026-3502---TrueConf-Client-Update-Hijacking-PoC

🔓 CVE-2026-3502 - Exploit de détournement de mise à jour du client TrueConf ⚠️ AVERTISSEMENT Cet outil est uniquement destiné à des fins éducatives et à des tests autorisés. Ne pas l'utiliser sur des systèmes sans autorisation explicite. 📋 Description Exploit pour CVE-2026-3502 - vulnérabilité de...