voidaccess v2.0.1

VoidAccess Self-hostable OSINT for turning dark-web research queries into structured threat intelligence. Built for security researchers, threat-intelligence teams, and authorized investigators who need collection, enrichment, relationship mapping, and export in one workflow. Terminal Output Quic...

OpenDoor v5.18.0

OpenDoor — OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...

threatcl v0.6.5

threatcl Threat Modeling with HCL What happened to hcltm? hcltm has been renamed to threatcl. Welcome! Overview !TIP Want to read the new documentation? Head over to threatcl.dev There are many different ways in which a threat model can be documented. From a simple text file, to more in-depth wor...

fence v0.1.65

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: zipkin, keycloak-config-cli, apache-nifi-registry...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq, jenkins, camunda, apache-nifi-registry, kafbat-ui-fips, keycloak-config-cli, camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, kafbat-ui...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq, jenkins, camunda, apache-nifi-registry, kafbat-ui-fips, keycloak-config-cli, camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, kafbat-ui...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq, jenkins, camunda, apache-nifi-registry, kafbat-ui-fips, keycloak-config-cli, camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, kafbat-ui...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq, jenkins, camunda, apache-nifi-registry, kafbat-ui-fips, keycloak-config-cli, camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, kafbat-ui...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq, jenkins, camunda, apache-nifi-registry, kafbat-ui-fips, keycloak-config-cli, camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, kafbat-ui...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq, jenkins, camunda, apache-nifi-registry, kafbat-ui-fips, keycloak-config-cli, camunda-zeebe, apache-activemq-fips, apache-camel-karavan-devmode, kafbat-ui...

CVE-2026-25552

The CVE-2026-25552 entry concerns Ghost CLI before 1.30.1, where an IP spoofing vulnerability allows unauthenticated remote attackers to bypass rate-limiting on self-hosted Ghost instances. The underlying issue is misusing the X-Forwarded-For header in combination with a misconfigured Nginx setup...

CVE-2026-25552 Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...

EUVD-2026-51595

Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain...