229 matches found
OSIB
OWASP 开放安全信息库（OSIB） 项目页面： https://owasp.org/www-project-open-security-information-base 软件仓库： https://github.com/OWASP/OSIB 提供的工具： mkdocsmacroosib.py （可手动安装的 Python 模块） osibmacro.py （复制此宏以导入该 Python 模块） 链接/数据： osib.yml （提供数千个（深层）链接，指向 MITRE CWE、OWASP Top10、ASVS、速查表（Cheat Sheets）、主动控制（Proactive...
owasp-scs
OWASP Smart Contract Security SCS Unisciti a Slack di OWASP Smart Contract Security Discussioni e Supporto Questa è la repository ufficiale di GitHub del progetto OWASP Smart Contract Security SCS. Questa iniziativa completa fornisce standard di sicurezza, linee guida e risorse per lo sviluppo,...
OpenCRE
OpenCRE Besuchen Sie https://www.opencre.org, um OpenCRE in Aktion zu sehen und weitere Erläuterungen zu erhalten. OpenCRE steht für Open Common Requirement enumeration. Es ist eine interaktive Plattform zur Verknüpfung von Inhalten, die Sicherheitsstandards und -richtlinien vereint. Sie bietet...
owtf
Offensive Web Testing Framework OWTF OWASP OWTF helps penetration testers stay efficient and aligned with security standards such as the OWASP Testing Guide v3 and v4, the OWASP Top 10, PTES, and NIST so that they have more time to: See the big picture and think outside the box. Efficiently find,...
CVE-2026-56609 HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).
HCL iControl is affected by Weak SSL/TLS Version Supported vulnerability. It was observed that the application was using weak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack modern security features, making them vulnerable to known attacks and exposing sensitive information...
OpenMatter Network Joins HOL Initiative to Help Define Standards for Verifiable AI Collaboration and Security
Melbourne, Florida, United States, 8th July 2026, CyberNewswire...
CVE-2026-44938
A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a Fleet-monitored...
CVE-2026-44938
A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a Fleet-monitored...
CVE-2026-44938
CVE-2026-44938 affects Fleet’s agent-side deployer, which did not filter security‑sensitive keys from namespaceLabels when applying them to a target namespace. An attacker with git push access to a Fleet-monitored repo could overwrite Pod Security Standards (PSS) enforcement labels, weakening adm...
Rancher has Privilege Escalation from Project Owner to Host
Impact A vulnerability has been identified in Rancher Manager that allows users assigned the Project Owner role to modify Pod Security Admission PSA labels on namespaces within their projects. Under the default role configuration, an attacker with the following access pattern can exploit this...
GHSA-864G-863M-VCVQ Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
Impact A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml or BundleDeployment.spec.options.namespaceLabels when applying them to the target namespace. An attacker with git push access to a...
project_hydra
Project HYDRA Automated vulnerability discovery & exploitat...
[SECURITY] Fedora 44 Update: nss-3.122.1-1.fc44
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks
Retrieval-Augmented Generation RAG significantly mitigates the hallucinations and domain knowledge deficiency in large language models by incorporating external knowledge bases. However, the multi-module architecture of RAG introduces complex system-level security vulnerabilities. Guided by the R...
EUVD-2026-2197
Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...
EUVD-2026-1583
A vulnerability was identified in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/addadmin.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...
EUVD-2026-1288
EUVD-2026-1288...
EUVD-2026-1347
The AA Block Country plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.0.1. This is due to the plugin trusting user-supplied headers such as HTTPXFORWARDEDFOR to determine the client's IP address without proper validation or considering if the server is...