kube-linter

Статический анализ для Kubernetes Что такое KubeLinter? KubeLinter анализирует YAML-файлы Kubernetes, диаграммы Helm и манифесты Kustomize и проверяет их на соответствие различным лучшим практикам с акцентом на производственную готовность и безопасность. KubeLinter запускает разумные проверки по...

red-detector

Red-Detector Description Scannez votre instance EC2 pour trouver ses vulnérabilités à l'aide de Vuls https://vuls.io/en/. Auditez votre instance EC2 pour trouver des erreurs de configuration de sécurité à l'aide de Lynis https://cisofy.com/solutions/lynis. Scannez votre instance EC2 pour détecter...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

gixy

GIXY Vue d'ensemble Gixy est un outil pour analyser la configuration Nginx. Le principal objectif de Gixy est de prévenir les erreurs de configuration de sécurité et d'automatiser la détection des failles. Les versions de Python actuellement supportées sont 2.7, 3.5, 3.6 et 3.7. Avertissement :...

azure-security-auditor

Azure Security Posture Auditor Легкий CLI-инструмент производственного уровня, который проверяет конфигурации безопасности Azure и выявляет распространенные ошибки настройки — повторяя то, что Microsoft Defender for Cloud проверяет внутри. Checks ID| Категория| Проверка| Серьезность ---|---|---|-...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Mauvaise configuration de sécurité ClickJacking ⚠️ Score de base : 6.5 MOYEN Échelle : CVSS ⚠️ 📌 Description Ce dépôt démontre une faille de sécurité de type Clickjacking présente sur le site G1. La vulnérabilité permet à un attaquant de charger le site dans une iframe , en...

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability stemming from improper access controls. An authenticated attacker with low privileges can exploit this to view restricted data elements across tenant boundaries , indicating a cross-tenant information disclosur...

EUVD-2026-82773

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

CVE-2026-21848: Improper Access Control

HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls, enabling the unauthorized viewing of restricted data elements across tenant boundaries...

nerva v1.69.6

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

PT-2026-88063

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...

CVE-2026-55513

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.3.0 to before version 0.5.0, the nebula-mgmt Web UI host-creation path ignores both the server-wide enrollmenttokenttl security setting and per-network networkconfig.enrollmenttokenttl overrides. API host creatio...

EUVD-2022-56032

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

PT-2026-85665

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

The vulnerability of the AuthLdap::create() method in the phpMyFAQ web application allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the AuthLdap::create method in the phpMyFAQ web application is related to security configuration errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...