layne

Layne Layne è un'app GitHub self‑hosted che centralizza la scansione di sicurezza nei nostri repository. Non utilizzando strumenti SAST/secrets commerciali e non avendo accesso a GitHub Enterprise, può diventare difficile mantenere diversi file di workflow GitHub Actions su repository differenti,...

GuardScan

🛡️ GuardScan 100% Gratuito e Open Source • CLI Privacy-First per la Scansione della Sicurezza e la Revisione del Codice AI root@kitploit: / | | | | / \ | | \ / | / | / \ | \ | | / | | | | | | | | | |/ \ | | | | | | \ | | / \ | | | | | | | | | | || | || / | | || | | | / | |\ | || | || | | |...

mcp-xray

MCP X-Ray Übersicht MCP X-Ray ist eine einheitliche Open-Source-Sicherheitsscan- und Penetrationstestlösung für Model Context Protocol MCP-Server. Es erzeugt produktionsreife SARIF-Berichte für die nahtlose Integration in Sicherheitstools und CI/CD-Pipelines. Suchergebnisse können optional auf...

foxguard

foxguard Scansione di sicurezza locale veloce per codice, segreti, dipendenze e rischio crittografico. root@kitploit: npx foxguard...

oxo

Motore di Orchestrazione delle Scansioni OXO OXO è un framework di scansione di sicurezza costruito per modularità, scalabilità e semplicità. OXO Engine combina strumenti specializzati per lavorare in modo coeso per trovare vulnerabilità ed eseguire azioni come ricognizione, enumerazione e...

CVE-2024-38856

nuclei -t CVE-2024-38856.yaml -u https://target...

SafeForge

SafeForge – Wo Apps mit Vertrauen gebaut werden SafeForge ist ein Open-Source-Mobile-App-Hub , der auf GitLab basiert und es Entwicklern ermöglicht, mobile Anwendungen in einem sicheren, KI-verifizierten und vollständig verschlüsselten Ökosystem zu entwickeln, hochzuladen, zu teilen und...

oauth-scan

OAUTHScan Descrizione OAUTHScan è un'estensione per Burp Suite scritta in Java con lo scopo di fornire alcuni controlli di sicurezza automatici, che potrebbero essere utili durante i test di penetrazione su applicazioni che implementano gli standard OAUTHv2 e OpenID. Il plugin cerca varie...

CVE-2026-16268

creationtimestamp| type| source ---|---|--- 2026-08-17 06:00:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-16268.yaml 2026-08-18 00:00:03+00:00| confirmed|...

GO-2026-6005 vulnerabilities

Vulnerabilities for packages: tigera-operator, datadog-agent-fips, gitlab-operator, datadog-agent, tigera-operator-fips, gitlab-operator-fips...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: telegraf, kyverno-fips, cerbos-fips, teleport, skaffold-fips, rancher-fleet, rclone-fips, gitlab-rails-ce, gitaly, terragrunt, upwind-agent, rclone, scorecard, syft-fips, cerbos, syft, seaweedfs-rocksdb-fips, flux-fips, amazon-ssm-agent, external-secrets-operator-fip...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: spire-server, rekor, flux-kustomize-controller, slsa-verifier, gitsign, fulcio-fips, terragrunt, kubescape, argo-workflows, sops, flux-source-controller, oauth2-proxy, tkn, falcoctl-fips, timestamp-authority-fips, vexctl, dex, cosign, kots, bank-vaults-fips, fulcio,...

GO-2026-5547 vulnerabilities

Vulnerabilities for packages: spire-server, chainloop-control-plane, rekor, skaffold, kyverno-notation-aws-fips, livekit-cli, docker-cli-buildx, falcoctl, flux-source-controller-fips, docker, trivy-fips, goreleaser, image-factory-fips, neuvector-sigstore-interface-fips, spire-server-fips,...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: kubescape, docker-compose...

GO-2026-4887 vulnerabilities

Vulnerabilities for packages: grafana, skopeo, opentelemetry-operator, openfga, traefik, ko, gatekeeper, osv-scanner, buf, podman, amazon-cloudwatch-agent-operator, rancher-agent, undock, cluster-api, apko, datadog-agent, trivy-operator, k8sgpt, melange, buildah, splunk-otel-collector, trivy,...

GO-2025-4014 vulnerabilities

Vulnerabilities for packages: skopeo, mesosphere-vsphere-csi, cloud-provider-gcp-cloud-controller-manager, docker-credential-acr-env, cert-manager-cmctl, ip-masq-agent, kube-bench, policy-controller, promxy, xcover, hydra, php-fpmexporter, spicedb-operator, ko, velero-plugin-for-aws,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: boring-registry, crossplane-provider-azure-managedidentity, falcoctl, minio-operator, skaffold, weaviate, temporal, bank-vaults, promxy, azcopy, crossplane-provider-azure, policy-controller, grafana-alloy, secrets-store-csi-driver-provider-azure, ko, wal-g, k3s,...

CVE-2026-17632

CVE-2026-17632 affects IBM Langflow OSS versions 1.0.0–1.10.3. The vulnerability arises from improper validation of Python code during AST-based security scanning, enabling a remote authenticated attacker to execute arbitrary code. The NVD/CVE listings report a high-severity vector with CVSS 3.1:...

PYSEC-2026-1429 GuardDog Zip Bomb Vulnerability in safe_extract() Allows DoS

Summary GuardDog's safeextract function does not validate decompressed file sizes when extracting ZIP archives wheels, eggs, allowing attackers to cause denial of service through zip bombs. A malicious package can consume gigabytes of disk space from a few megabytes of compressed data...

CVE-2025-71375 picklescan - Undetected Remote Code Execution via _operator.methodcaller

picklescan before 0.0.34 fails to detect the operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load...