GhostESP

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

ubertooth

Ubertooth El proyecto Ubertooth es una plataforma de desarrollo inalámbrica de código abierto adecuada para la experimentación con Bluetooth. Ubertooth incluye un sniffer BLE capaz y puede capturar algunos datos de conexiones Bluetooth Classic de Basic Rate BR. La última versión es 2020-12-R1. La...

freki

Freki es una plataforma de análisis de malware gratuita y de código abierto. Objetivos 1. Facilitar el análisis de malware y la ingeniería inversa; 2. Proporcionar una API REST fácil de usar para diferentes proyectos; 3. Despliegue sencillo mediante Docker; 4. Permitir la adición de nuevas...

Rocket.Chat

The ultimate secure open-source solution for team communications Rocket.Chat is an open-source, secure, fully customizable communications platform developed in TypeScript for organizations with high standards of data protection. We are the ultimate solution for team communications, enabling...

DataEase - Remote Code Execution

DataEase is an open-source business intelligence and data visualization platform. Public advisories state that CVE-2025-49002 is related to a bypass in the previous fix for CVE-2025-32966 involving case-insensitive handling of restricted H2 JDBC keywords. This template is a non-invasive detection...

wazuh v5.0.0-beta5

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed n...

PT-2026-63511

Name of the Vulnerable Software and Affected Versions danger danger-js versions prior to 13.0.8 Description An OS command injection issue exists in the CLI component within the danger.git.diffForFile function located in the source/platforms/git/localGetFileAtSHA.ts file. This occurs when the File...

CVE-2026-11988

creationtimestamp| type| source ---|---|--- 2026-07-01 12:44:47+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkbbfna32d 2026-07-01 22:04:11+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmjjkmuem2q...

[SECURITY] Fedora 43 Update: pgadmin4-9.16-1.fc43

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

CVE-2025-58468

creationtimestamp| type| source ---|---|--- 2026-06-10 05:04:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnvwrgpei72u...

CVE-2026-34082

Dify is an open-source LLM app development platform. Prior to 1.13.1, the method DELETE /console/api/installed-apps//conversations/ has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue...

CVE-2026-43873

WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/CloneSite/cloneClient.json.php echoes the local CloneSite shared secret $objClone-myKey, a constant md5$global'systemRootPath' . $global'salt' into the HTTP response body on every unauthenticated request. T...

CVE-2026-40882

OpenRemote is an open-source internet-of-things platform. Prior to version 1.22.0, the Velbus asset import path parses attacker-controlled XML without explicit XXE hardening. An authenticated user who can call the import endpoint may trigger XML external entity processing, which can lead to...

PT-2026-45867

Name of the Vulnerable Software and Affected Versions OpenCTI versions prior to 7.260227.0 Description An issue exists in the rendering of email-message observable body data where the content of the body field is not appropriately sanitized. This allows for Cross-Site Scripting XSS, a technique...

CVE-2026-10189

creationtimestamp| type| source ---|---|--- 2026-05-31 17:54:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn654uzzeu27 2026-05-31 19:06:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn6b52zenf2j 2026-06-01 07:30:27+00:00| seen|...

flowintel 安全漏洞

Flowintel is an open-source security analyst case and task management platform developed by flowintel. Versions of FlowIntel 3.3.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the external reference URL detection function in the app/case/task.py file, which has a...

CVE-2026-9035

creationtimestamp| type| source ---|---|--- 2026-05-27 16:33:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtwq45msb2p...

Budibase 安全漏洞

Budibase is an open-source platform developed by Budibase in the UK. It allows for the creation of internal applications, workflows, and management panels within minutes. Versions of Budibase prior to 3.38.2 contained security vulnerabilities. These vulnerabilities stemmed from the failure to...