uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

tmux

Welcome to tmux! tmux is a terminal multiplexer: it enables a number of terminals to be created, accessed, and controlled from a single screen. tmux may be detached from a screen and continue running in the background, then later reattached. This release runs on OpenBSD, FreeBSD, NetBSD, Linux,...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

amass

Проект OWASP Amass Проект OWASP Amass выполняет сетевое картирование поверхностей атак и обнаружение внешних активов, используя методы сбора информации из открытых источников и активной разведки. Установка Дополнительные инструкции по установке и документацию можно найти в репозитории Amass Docs...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: caddy, spicedb, argo-workflows-fips, falcosidekick-fips, caddy-fips, trillian, kube-bench, step, argo-workflows, wavefront-collector-for-kubernetes, temporal-server-fips, temporal-server, amass, src, trillian-fips, step-ca, kots, ferretdb, kube-bench-fips, k3s, kine...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: k3s, temporal-server, spicedb, src, step-ca, kine, argo-workflows, kots, caddy, amass, step, kube-bench, ferretdb, trillian...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, k3s, cosign, doppler-kubernetes-operator, kubernetes-csi-external-provisioner, kyverno-policy-reporter-ui, esbuild, bank-vaults, frp, nerdctl, pgpool2exporter, nri-f5, ytt, pvc-autoresizer, crossplane-provider-aws-elasticache, conjur-cli,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: grafana-alloy, keda-fips, commercial-chainloop-backend, migrate, timescaledb-parallel-copy, opentelemetry-collector-contrib-fips, kube-bench, trillian, step-fips, vault, argo-workflows, splunk-otel-collector, gotrue-fips, cloudnative-pg-fips, gitlab-kas,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, kubewatch, ytt, pvc-autoresizer, openbao, conjur-cli, cerbos, nri-elasticsearch, apisix-ingress-controller, swagger, jitsucom-bulker, omnibump, wal-g, envoy-gateway, kyverno-notation-aws, ingress-nginx-controller,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: k3s, step-issuer, splunk-otel-collector, sftpgo, step-ca, tkn, nuclei, argo-workflows, caddy, loki, openbao, trillian, croc, cerbos, minio, juicefs, seaweedfs, db-operator, ksops, witness, temporal, jitsucom-bulker, certificate-transparency, envoy-gateway, rekor, age...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, pgpool2exporter, ytt, pvc-autoresizer, conjur-cli, apisix-ingress-controller, swagger, jitsucom-bulker, secrets-store-csi-driver-provider-gcp, fscrypt, kubernetes-dashboard-metrics-scraper, cloud-provider-vsphere, timescaledb-tune, grpcur...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: mongo-tools, doppler-kubernetes-operator, scorecard, slsa-verifier, logstash-exporter, nerdctl, contour, pgpool2exporter, flyte, cert-manager-webhook-pdns, glow, chartmuseum, pvc-autoresizer, trillian, conjur-cli, local-path-provisioner, go-bindata, tfsec,...