ThreatMapper

ThreatMapper - Runtime Threat Management and Attack Path Enumeration for Cloud Native !NOTE This project is maintained by https://threatmapper.org Deepfence ThreatMapper hunts for threats in your production platforms, and ranks these threats based on their risk-of-exploit. It uncovers vulnerable...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

apache_skywalking

Protocols There are two types of protocols list here. Probe Protocol. Include the descriptions and definitions about how agent send collected metrics data and traces, also the formats of each entities. Query Protocol. The backend provide query capability to SkyWalking own UI and others. These...

metarget

中文 | English 1 Introduction Metarget = meta- + target, a framework providing automatic constructions of vulnerable infrastructures, used to deploy simple or complicated vulnerable cloud native targets swiftly and automatically. 1.1 Why Metarget? During security researches, we might find that the...

HybridTestFramework

HybridTestFramework Supported By In the era of cloud-native world we cannot stick to a particular framework, however due to projects requirement we often need to evolve the existing testing solution in such a way so that it can cater multiple testing requirement, hence HybridTestFramework is...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

Krawl

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

lockc

lockc is open source sofware for providing MAC Mandatory Access Control type of security audit for container workloads. The main reason why lockc exists is that containers do not contain. Containers are not as secure and isolated as VMs. By default, they expose a lot of information about host OS...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

kratos

Chat · Discussions · Newsletter · Documentation · Essayer Ory Network · Emplois Ory Kratos est un système de gestion des identités et des utilisateurs conçu selon une approche API-first pour les applications cloud native. Il centralise les flux de connexion, d'inscription, de récupération, de...

KubeArmor

KubeArmor est un système de renforcement de la sécurité d'exécution natif cloud qui restreint le comportement tel que l'exécution de processus, l'accès aux fichiers et les opérations réseau des pods, des conteneurs et des nœuds VM a...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

matano

Lac de données de sécurité open source pour AWS Matano Open Source Security data lake est un lac de données de sécurité natif cloud open source, conçu pour les équipes de sécurité sur AWS. !NOTE Matano propose un Cloud SIEM géré commercial pour une plateforme complète d'opérations de sécurité en...

cnspec

cnspec Открытый проект безопасности и политик для облачных сред cnspec оценивает безопасность и соответствие требованиям всей вашей инфраструктуры. Он выявляет уязвимости и ошибки конфигурации в публичных и частных облачных средах, кластерах Kubernetes, контейнерах, реестрах контейнеров, серверах...

lightwave

What is Lightwave Project Lightwave is an open source project comprised of enterprise-grade, identity and access management services targeting critical security, governance, and compliance challenges for Cloud-Native Apps within the enterprise. Through integration with Project Photon, Project...

NetLogic

NetLogic Cloud-Native Attack Surface Mapper & Vulnerability Correlator — v3.0 NetLogic is a network security platform combining active port scanning, CVE correlation live NVD API, SSL/TLS analysis, HTTP security auditing, DNS/email security assessment, subdomain takeover detection, passive OSINT,...

KubeArmor v1.7.6-rc1

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

CVE-2026-81505 Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials

Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/projectID/sources/sourceID endpoint authorizes access to the project in the URL, but Handler.GetSource calls sources.Service.FindSourceByID and fetches the Source only by sourceID without confirming that its...

CVE-2026-83417

Vulnerability in the Oracle Communications Cloud Native Core Security Edge Protection Proxy product of Oracle Communications component: SEPP. Supported versions that are affected are 26.1.200 and 25.2.201. Easily exploitable vulnerability allows unauthenticated attacker with access to the physica...

CVE-2026-83419

Oracle Communications Cloud Native Core Security Edge Protection Proxy (SEPP) in versions 26.1.200 and 25.2.201 contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized read access to a s...