GATOR

KIT DI ATTACCO GCP PER LA RICERCA OFFENSIVA GATOR - GCP Attack Toolkit for Offensive Research Kit di attacco GCP per la ricerca offensiva, uno strumento progettato per assistere nella ricerca e nello sfruttamento degli ambienti Google Cloud. Offre una gamma completa di moduli progettati per...

offensive-docker-vps

Offensive Docker VPS Create a VPS on Google Cloud Platform or Digital Ocean easily to use Offensive Docker and launch the assessments to the targets. 🎉🎉Digital Ocean Bonus 🎉🎉 You can sign up with my referral link https://m.do.co/c/0d2d40f6a8a1 and get $100 free credit to try it out! Table of...

hayat

Hayat Google Cloud Platform Audit- & Härtungs-Skript Was bedeutet „Hayat“? Nun, ich hatte ehrlich gesagt Schwierigkeiten, einen einzigartigen Namen zu finden. „Hayat“ ist ein türkisches Wort, das auf Englisch „Life“ bedeutet und auch der Name meiner Nichte ist. Bereit, sie zu treffen? 😍 😍 😍 Hayat...

kubebot

Kubebot Un Slackbot per test di sicurezza basato su un backend Kubernetes su Google Cloud Platform NOTA: Non sto più mantenendo attivamente questo progetto. Sto lavorando alla v2 di Kubebot insieme ad altre persone, che verrà probabilmente presentata a una delle prossime conferenze di sicurezza...

pd-agent

ProjectDiscovery Cloud Platform — Agente Cosa fa • Avvio rapido • Installazione • Configurazione • Scalabilità Cosa fa pd-agent ti consente di scansionare le tue proprie reti interne dalla ProjectDiscovery Cloud Platform. Installa l'agente su una macchina all'interno della rete che vuoi scansiona...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2026-19485

A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...

EUVD-2026-66653

A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...

CVE-2026-20253

🚨 CVE-2026-20253 - Vulnerabilità critica di creazione file non autenticata in Splunk Enterprise Vulnerabilità di creazione e troncamento arbitrario di file non autenticata che colpisce Splunk Enterprise e Splunk Cloud Platform. 📖 Sommario Esecutivo CVE-2026-20253 è una vulnerabilità critica in...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Semplice strumento di proof of concept 🛠 Informazioni su questa applicazione Questo strumento mostra una proof of concept PoC tecnica per il problema di sicurezza CVE-2026-2472. Il problema riguarda l'SDK Python Vertex AI di Google Cloud Platform. È...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

CVE-2026-76341

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:49+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

CVE-2026-76316

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:50+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 23:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtmwink3bv24...

CVE-2026-76315

creationtimestamp| type| source ---|---|--- 2026-08-20 04:45:48+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820 2026-08-21 23:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtmuszamoh23...

EUVD-2026-60060

A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...

EUVD-2026-53390

Improper Privilege Management in Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version...

Malicious code in @cacheable/node-cache (npm)

npm/@cacheable/node-cache version 3.1.2 is a trojanized release published on 2026-08-04 during the compromise of the npm/GitHub maintainer account behind the keyv and cacheable package families user "Jaredwray". Attackers pushed the malicious payload to the source repository and cut releases...