xori

Xori - Marco de desensamblado personalizado Xori es una librería de desensamblado y análisis estático preparada para automatización que consume shellcode o binarios PE y proporciona datos de análisis de triage. Agradecimientos: Xori no existiría sin la inspiración e ideas de la comunidad de códig...

codeql

CodeQL Questo repository open source contiene le librerie e le query CodeQL standard che alimentano GitHub Advanced Security e gli altri prodotti di sicurezza applicativa che GitHub mette a disposizione dei suoi clienti in tutto il mondo. Come imparare CodeQL ed eseguire query? Esiste un'ampia...

haruspex

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing-fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-oam, crossplane-provider-aws-backup, crossplane-provider-aws-vpc-fips, slsa-verifier, knative-client, chainctl-fips, trillian-fips, falcoctl-fips, dl, git-lfs-fips, stakater-reloader, crossplane-provider-aws-medialive,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-oam, crossplane-provider-aws-backup, crossplane-provider-aws-vpc-fips, generic-device-plugin, slsa-verifier, knative-client, chainctl-fips, trillian-fips, falcoctl-fips, dl, git-lfs-fips, stakater-reloader, crossplane-provider-aws-medialive,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-oam, crossplane-provider-aws-backup, crossplane-provider-aws-vpc-fips, generic-device-plugin, slsa-verifier, knative-client, chainctl-fips, trillian-fips, falcoctl-fips, dl, git-lfs-fips, stakater-reloader, crossplane-provider-aws-medialive,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-oam, crossplane-provider-aws-backup, crossplane-provider-aws-vpc-fips, generic-device-plugin, slsa-verifier, knative-client, chainctl-fips, trillian-fips, falcoctl-fips, dl, git-lfs-fips, stakater-reloader, crossplane-provider-aws-medialive,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-oam, crossplane-provider-aws-backup, crossplane-provider-aws-vpc-fips, generic-device-plugin, slsa-verifier, knative-client, chainctl-fips, trillian-fips, falcoctl-fips, dl, git-lfs-fips, stakater-reloader, crossplane-provider-aws-medialive,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-oam, crossplane-provider-aws-backup, crossplane-provider-aws-vpc-fips, generic-device-plugin, slsa-verifier, knative-client, chainctl-fips, trillian-fips, falcoctl-fips, dl, git-lfs-fips, stakater-reloader, crossplane-provider-aws-medialive,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, coredns, kubernetes-dashboard-metrics-scraper, rancher-agent, grpc-health-probe, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, coredns, kubernetes-dashboard-metrics-scraper, rancher-agent, grpc-health-probe, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, coredns, kubernetes-dashboard-metrics-scraper, rancher-agent, grpc-health-probe, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis,...

CVE-2026-78663 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, coredns, kubernetes-dashboard-metrics-scraper, rancher-agent, grpc-health-probe, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis,...

GO-2026-6610 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, rancher-agent, kubernetes-dashboard-metrics-scraper, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis, kubernetes-csi-external-provisione...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, coredns, kubernetes-dashboard-metrics-scraper, rancher-agent, grpc-health-probe, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: zot, flux-notification-controller, crossplane-provider-aws-firehose, ratify, coredns, kubernetes-dashboard-metrics-scraper, rancher-agent, grpc-health-probe, tekton-chains, opensearch-k8s-operator, velero, prometheus-adapter, knative-serving, helm-mapkubeapis,...

gokart

GoKart - Análisis Estático de Seguridad para Go GoKart es una herramienta de análisis estático para Go que encuentra vulnerabilidades utilizando la forma SSA asignación única estática del código fuente Go. Es capaz de rastrear el origen de variables y argumentos de funciones para determinar si la...

pyre-check

!WARNING Este repositorio está archivado Este repositorio ya no se mantiene y ha sido archivado. Type checking: Pyre ha sido reemplazado por Pyrefly, nuestro verificador de tipos y servidor de lenguaje de próxima generación para Python. Análisis de seguridad Pysa: Pysa se ha trasladado a su propi...

stacs

Escáner Estático de Tokens y Credenciales ¿Qué es? STACS es un escáner estático de credenciales impulsado por YARA que admite formatos de archivo binarios, análisis de archivos anidados, conjuntos de reglas y listas de ignorados componibles, e informes SARIF. ¿Qué soporta STACS? Actualmente, STAC...

copyfail-go

CopyFail Go La maggior parte degli LPE su Linux necessitano di una finestra di race o di un offset specifico del kernel. Copy Fail è un difetto logico lineare — non necessita di nessuno dei due. Lo stesso script Python da 732 byte binario Go statico compromette ogni distribuzione Linux rilasciata...