nano-analyzer

Nano-analyzer Uno scanner minimalista per vulnerabilità zero-day basato su LLM, creato daAISLE. Prototipo di ricerca a scopo dimostrativo. Si tratta di un semplice harness a file singolo in grado di rilevare reali vulnerabilità zero-day. Tieni presente che è un prototipo, orientato verso bug di...

json-sanitizer

json-sanitizer Dato un contenuto simile a JSON, il JSON Sanitizer lo converte in JSON valido. Primi passi - Contatti Può essere collegato a entrambe le estremità di una pipeline di dati per aiutare a soddisfare il principio di Postel: sii conservatore in ciò che fai, sii liberale in ciò che...

smokedmeat

SmokedMeat CI/CD रेड टीम फ्रेमवर्क मेटास्प्लॉइट की तरह, लेकिन CI/CD पाइपलाइनों के लिए। poutine बिल्ड पाइपलाइन SAST स्कैनर के निर्माताओं द्वारा BoostSecurity Labs में। चेतावनी: यह उपकरण केवल अधिकृत सुरक्षा परीक्षण के लिए है। SmokedMeat इसलिए बनाया गया है क्योंकि CI/CD पाइपलाइन के खतरों को बहुत कम...

nCPU

Ein vollständiger Computer, bei dem jede Schicht – Arithmetik, Betriebssystem, Compiler, Display – entweder ein trainiertes neuronales Netz ist oder vollständig auf der GPU läuft. Das Modell läuft nicht auf dem Computer. Das Modell ist der Computer. nCPU ist ein Repository, das eine These aus fün...

DeepZero

Motore di pipeline per la ricerca automatizzata di vulnerabilità Definisci pipeline come YAML. DeepZero gestisce orchestrazione, parallelismo, tolleranza ai guasti e stato. Italiano | 简体中文 | Français 🔗 Pipeline-as-YAML - catena le fasi di ingestione, filtro, trasformazione e valutazione LLM in...

tenzir

Pipeline di dati per i team di sicurezza Raccogli, trasforma, arricchisci e instrada la tua telemetria—tutto in un unico posto. Cos'è Tenzir? Tenzir è il motore di pipeline di dati per i team di sicurezza. Se devi raccogliere, analizzare, modellare, normalizzare, aggregare, archiviare, interrogar...

trivy-action

Trivy Action GitHub Action per Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Indice Utilizzo Scansione della pipeline CI Scansione della pipeline CI con configurazione Trivy Cache Configurazione di Trivy Scansione di un tarball Us...

DevSecOpsGuideline

OWASP DevSecOps Guideline A OWASP DevSecOps Guideline explica como podemos implementar um pipeline seguro, adotar as melhores práticas e introduzir ferramentas que podemos usar nesse contexto. Além disso, o projeto procura ajudar a promover a cultura de segurança shift-left no nosso processo de...

metasploit_in_termux

Metasploit Framework 6 in Termux Come Installare Prima Per avere Termux aggiornato: Cancella tutti i dati di Termux nelle impostazioni Android Disinstalla e reinstalla l'ultima versione di Termux da F-Droid La versione sul Play Store è obsoleta Quindi avvia Termux per l'inizializzazione, chiudilo...

redamon

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

security-audit-skill

security-audit Una skill per agenti di codifica che trasforma il tuo agente in un revisore di sicurezza. Orchestra più agenti paralleli attraverso un pipeline in sei fasi — ricognizione, caccia, convalida, report, output strutturato e verifica indipendente — per trovare vulnerabilità sfruttabili...

dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy. Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickl...

Nest

!Issueshttps://img.shields.io/github/issues/owasp/nest?color=blue&style=...

CVE-2026-80581

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-80581 ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-80581 ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-80581

CVE-2026-80581 affects the Linux kernel 's ASoC SOF IPC4-PCM subsystem. When the Sound Open Firmware (SOF) DSP's IPC (inter-process communication) times out due to system scheduling blockage , the pipeline state change was previously treated as a failure even though the firmware had actually rece...

CVE-2026-15387

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy...

CVE-2026-15387

GitLab EE is affected by an acceptance of extraneous untrusted data with trusted data issue in versions 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 . The root cause is improper handling of job dependencies , which allows an authenticated user with developer-role permissions to ...

EUVD-2026-66429

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy...