secator v0.42.0

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

k8scout v0.1.2

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path — from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You ha...

MINI-WWXP-HJXC-7547

Bulletin has no description...

GO-2025-4245 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, grafana-alloy, nats, eks-distro-fips, rke2-runtime, k3s, keda-fips, kargo, nats-fips, eks-distro, aws-otel-collector-fips, opentelemetry-collector, k8sgpt, keda, argo-workflows-fips, opentelemetry-collector-fips, argo-rollouts-fips, coredns-fips,...

GO-2025-4010 vulnerabilities

Vulnerabilities for packages: vault, crane-fips, crossplane-provider-kubernetes-fips, kyverno-policy-reporter-plugins-trivy-fips, k8ssandra-client-fips, packer, calico, gatekeeper, kepler, google-osconfig-agent, scorecard, yunikorn-web, dapr, cfssl-fips, hivemind, pgpool2exporter,...

CVE-2026-63424

During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges...

PT-2026-71416

CWE-306: Missing Authentication for Critical Function...

pingcastle v4.0.0.20

PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...

monkey365 v0.99

Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...

Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025

Automating DISA STIG Compliance for Amazon Linux 2023 and Windows Server 2025, giving defense and federal teams immediate and continuous hardening validation...

monkey365 v098.8

Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...

adPEAS v2.3.1

adPEAS v2 — Active Directory Privilege Escalation Awesome Scripts Comprehensive Active Directory security assessment — zero dependencies, single file, ready to go. What is adPEAS? adPEAS is a PowerShell-based security assessment tool that identifies misconfigurations, vulnerabilities, and privile...

adPEAS v2.3.0

adPEAS v2 — Active Directory Privilege Escalation Awesome Scripts Comprehensive Active Directory security assessment — zero dependencies, single file, ready to go. What is adPEAS? adPEAS is a PowerShell-based security assessment tool that identifies misconfigurations, vulnerabilities, and privile...

cve-hunter

CVE Hunter v3 — Autonomous Penetration Testing Platform One...

monkey365 v0.98.5

Monkey365 is an open-source security assessment framework for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals, consultants, administrators, and incident responders identify misconfigurations, review cloud security posture, and evaluate environments against industry...

Pachno 1.0.6 Security Assessment Toolkit

This Python-based security assessment tool performs non-destructive exposure checks against a Pachno deployment using authenticated sessions and controlled validation techniques...

VS Code 1.120.0 Extension Persistence Module for Security Assessment

This Python module demonstrates a VS Code extension persistence mechanism by creating and managing a custom extension within the Visual Studio Code extensions directory...

Oracle E-Business Suite 12.2.15 Payments Vulnerability Scanner

This Python-based security assessment tool scans Oracle E-Business Suite EBS Payments deployments for indicators associated with CVE-2026-46817...

PackageKit Advanced Vulnerability Assessment with D-Bus and Polkit Security Analysis

This Python tool is an advanced security assessment framework designed to evaluate potential exposure to a PackageKit-related vulnerability scenario by combining version analysis, policy inspection, and D-Bus interaction testing...

GHSA-P7H3-7Q52-72W8 printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...